32

Is there a Linux client for Checkpoint VPN? Preferably for Ubuntu?

11

I've heard good things about Shrew, but I've only ever seen it used on Windows.

http://shrew.net/home

15

I'm using SNX (by checkpoint) and it works perfect. It can be downloaded from here.

I used this guide in order to install snx on my client, check it out and see if you got all the required packages installed.

In addition, you can create a .snxrc file in your /home/user/ directory and include there the server's IP and username like so:

server          1.1.1.1
username        itaig

Then just run snx, you'll be asked to input your password and that's it.

5
  • 2
    I just get "SNX: Authentication failed" after I supply the certificate's password. Do I have to authenticate with the Windows client once before it will work, or something? Aug 11 '14 at 17:58
  • @RobinGreen, I've updated my answer, check it out.
    – Itai Ganot
    Aug 11 '14 at 18:06
  • Any idea how SNX would handle 2 factor authentication? I can't seem to get it to work. Aug 23 '16 at 7:36
  • It's complicated to configure and I haven't done it myself but I know it's doable
    – Itai Ganot
    Aug 23 '16 at 9:20
  • It is no longer supported on linux if ou disable RC4 and 3DES on the firewall :( Jul 12 '17 at 13:03
6

The existing client is ancient, and as for now AFAIK, there are no plans to write a newer one. There are Linux native VPN clients that should work with checkpoint - check out vpnc and raccoon especially.

http://www.vpnc.org/InteropProfiles/checkpoint-profile.pdf
http://www.fw-1.de/aerasec/ng/vpn-racoon/CP-VPN1-NG-Linux-racoon.html

3

I have successfully connected to Checkpoint (NGX R75) using Shrew Soft, more info here: https://serverfault.com/a/386021/73387

2

I'm assuming your looking for an IPSEC client, but if you are looking for SSL VPN, I have had good luck with the Checkpoint SNX client in Ubuntu.

http://www.checkpoint.com/products/ssl_network_ext/

2
  • 1
    Unfortunately this now redirects to their mobile blade site.
    – frankster
    Nov 14 '12 at 16:19
  • And no longer works with modern ciphers Jul 12 '17 at 13:05
0

I also was looking for it AND I've found a checkpoint client VPN on the Checkpoint Users Forums, I'll link it to you tomorrow.

OK Here is the link to the Documentation under RedHat:

http://www.google.com/url?q=http://www.checkpoint.com/techsupport/downloads/html/securemote/sr-5-0/SecureClient_NG_build_53328.pdf&ei=48FFS7vqK5Sw4Qacls3_Ag&sa=X&oi=nshc&resnum=1&ct=result&cd=1&ved=0CAwQzgQoAA&usg=AFQjCNGgVXRHVJM7alNik11aQoO_7zYxog

BUT, the Linux client VPN seems to be deprecated and no longer supported, as my own experience, it should be better to use the OpenSwan VPN to connect throught an Checkpoint VPN gateway under linux.

1

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.