Checkpoint VPN Linux Client

Question

Is there a Linux client for Checkpoint VPN? Preferably for Ubuntu?

Solution 1

I've heard good things about Shrew, but I've only ever seen it used on Windows.

http://shrew.net/home

Solution 2

I'm using SNX (by checkpoint) and it works perfect. It can be downloaded from here.

I used this guide in order to install snx on my client, check it out and see if you got all the required packages installed.

In addition, you can create a .snxrc file in your /home/user/ directory and include there the server's IP and username like so:

server          1.1.1.1
username        itaig

Then just run snx, you'll be asked to input your password and that's it.

Solution 3

The existing client is ancient, and as for now AFAIK, there are no plans to write a newer one. There are Linux native VPN clients that should work with checkpoint - check out vpnc and raccoon especially.

http://www.vpnc.org/InteropProfiles/checkpoint-profile.pdf
http://www.fw-1.de/aerasec/ng/vpn-racoon/CP-VPN1-NG-Linux-racoon.html

Solution 4

I have successfully connected to Checkpoint (NGX R75) using Shrew Soft, more info here: https://serverfault.com/a/386021/73387

Solution 5

I'm assuming your looking for an IPSEC client, but if you are looking for SSL VPN, I have had good luck with the Checkpoint SNX client in Ubuntu.

http://www.checkpoint.com/products/ssl_network_ext/

View more solutions

Comments

[frankster]

Unfortunately this now redirects to their mobile blade site.

[Robin Green]

I just get "SNX: Authentication failed" after I supply the certificate's password. Do I have to authenticate with the Windows client once before it will work, or something?

[Itai Ganot]

@RobinGreen, I've updated my answer, check it out.

[Rob Audenaerde]

Any idea how SNX would handle 2 factor authentication? I can't seem to get it to work.

[Itai Ganot]

It's complicated to configure and I haven't done it myself but I know it's doable

[Rob Audenaerde]

It is no longer supported on linux if ou disable RC4 and 3DES on the firewall :(

[Rob Audenaerde]

And no longer works with modern ciphers

[Maarten Bodewes]

Link is broken by now as well...