SecureClient MSI packaging and default policy

[rubber_chicken]

Hi,

I think I've missed a point so I'll put it out there. I've successfully packaged up the latest SecureClient for Vista using the cpmsi_tool. Everything is working nicely and as expected.

I'd like to be able to include a default desktop policy with the installation if I can. Is this possible using the MSI installation? I can't seem to find any reference in the VPN guide. Have I missed something?

Cheers

[jrdld]

Assuming your SmartCentre is on Windows, open a command prompt at

C:\Program Files\Checkpoint\SmartConsole\R60\PROGRAM\util

Type "cpmsi_tool" and you'll see a list of options, including "add". The file you need to add is "local.dt" - get an up to date one from a client that has recently connected to your gateway.

Also make sure that you have modified the [install] section in your product.ini to read

install_boot_policy.bat blockinbound

since the default argument for that batch file is "acceptall".


JR