Deploying Endpoint Clients

Check Point does not support both the Endpoint Security client and the Check Point Remote Access VPN client on the same endpoint. Uninstall the Check Point Remote Access VPN client before you deploy the Endpoint Security client.

During the upgrade, you cannot remove the Full Disk Encryption component.

  1. Click Overview and then click Download on the top banner.
  2. Click Download button under Windows or macOS, depending on the destination system.
  3. Do any of these to download the Initial Client:

    To install the Initial Client:

    1. From the left navigation panel, click Service Management and then in the Download Initial Client section, click on the Download button.

    2. From the left navigation panel, click Overview and then click on the Download button on the top banner.

  4. Deploy the Initial Client to all your endpoint devices, using a third party deployment tool.
    1. Automatic - Use deployment rules to automatically download and install pre-configured packages on Endpoint devices (see Automatic Deployment of Endpoint Clients).
    2. Manual - Export component packages to the endpoint devices, using third party deployment software, a shared network path, email, or other method (see Manual Deployment of Endpoint Clients).
    Note:

    • Admins are recommended not to pre-install Endpoint Security when using cloning utilities like Acronis. It is recommended to install Endpoint Security after the clone is created, or at least to block the initial registration before creating the clone.

    • If you have initiated to deploy the Endpoint Security client on an endpoint that is not yet added to the domain, see the sk181217 to complete the deployment.

    • For Mozilla Firefox users: If a user is accessing the browser for the first time after installing the Browser - Classic extension, a consent page appears that explains how the user's personal information is collected, used, and protected. The user must click Confirm to provide consent and activate the extension's protection features.

    • In Endpoint Management as a Service (EPMaaS), an administrator can upload or download only the Dynamic Package (*.EXE)‎.