Secure Client for Linux

[roadrunner]

Secure Client for Linux
Check Point now offers Secure Client for Linux from their Software Subscription site.

Currently, only specific RedHat kernels are supported, specifically those that shipped or were available for RedHat Linux 7.2 and 7.3. There are also some other limitations:


Office Mode isn't supported
Secure Client Verification (SCV) isn't supported
Certificate-based authentication is only supported with PKCS#12 format certificates
SecurID or any other type of Challenge-Response authentication isn't supported

FAQForm
FAQs.Class: SecureClientFAQs
FAQs.OS: OsLinux
FAQs.Version: ALL

[dreek]

I would consider 'Secureclient for Linux' is a dead product, given the very low level of enthusiasm and crippled solution from Checkpoint. I wonder how many of us are really running Redhat 7.2/7.3 anymore or that specific kernel.

[RichardLynch]

A new client of mine is running checkpoint VPN-1.

I use Linux.

My desktops and dev servers are all FC2 and FC3

I happened to have a production server with RH7 on it.

I installed the VPN-1 Linux client, and did /etc/rc.d/rc3.d/S95checkpointvpn start rather than re-boot, since it's Linux, after all.

Kernel Panic

Re-booted, as the instructions said.

Kernel Panic before I could even login.

Re-boot, single user mode, nuke their startup script, and continued normally with no problems.

So, not only is it crippled, it's just plain BROKEN in a very bad way.

I'm stuck using only my new laptop where I haven't had time to wipe out Windows :-(

On that, we had the problem that their latest versions did not provide the options my client needed me to checkbox to get it to work: Specifically, he's using IKE and UDP [mumble]

So I had the joy of downloading successively older versions until I found one that had the IKE and UDP checkboxes so I could work with for my client.

I may simple give up working for this guy ; It's simply not worth the hassle and inconvenience.

Unless somebody knows of an OpenSource Linux (FC2/FC3) VPN client that has IKE and UDP that I can easily install and use to connect.

YMMV

[mancymonek]

Hi all

Isn't that fun and strange that CheckPoint as big company , sell very secure sofware but cannot make secure clients for linux latest kernels???
In my opinion this is very bad situation because today many different companies using as many different linux distros as they are free to use.
Most of them working on latest kernels 2.6.x and probably they want to use their secure clients on workstations with this kind of linux distro.

There is nothing more that just use different software , and that is not good advertisement for CheckPoint.

Is there any logical explanation of this curious case ???

greetings
mancymonek

[melipla]

Originally Posted by mancymonek

Isn't that fun and strange that CheckPoint as big company , sell very secure sofware but cannot make secure clients for linux latest kernels???

Is there any logical explanation of this curious case ???

My guess is that they can't provide all of the features that SecureClient has for linux, which would make them not very secure. I blame the desktop policy...

[chillyjim]

The stated direction for Linux is SNX (SSL Network Extender)