Using the Export Package

Create the package for export

1. Go to Policy > Export Package.
2. Do one of these:
   1. To export a package for Endpoint Security, click Endpoint Client.
   2. To export a package for Browse Security, click Browse Client and continue with exporting the package.
3. Click the plus sign to create a new export package.

   The Create Export Package window opens.

4. Enter the Package Name and select the applicable Operating System.
5. Select an Operating System.

   • Windows

     • Select the Package version.

   • macOS

     • Select the Package version.

   • Linux

     • Select the Package platform.

     • Select the Package version.

6. Select Capabilities.

   • For Linux, only the Anti-Malware blade is supported with the exported package.

     Note:

     If the Endpoint Security Anti-Malware capability is installed, the third-party Anti-Malware status in the Endpoint Security client is not displayed.

   • For general limitations on macOS, see sk110975.

7. To add a new VPN site to the package, see .Adding a New VPN Site to an Exported Package
8. Optional: Select a Virtual group or create a new one.

   Users who install this package will automatically be part of this virtual group.

   You can use the virtual group to apply a security policy to the entire group instead of to each object in the group separately.

9. Select the settings for the Dynamic Package.
   Note:

   Dynamic package is not supported for macOS and Linux.
   1. Select the Minimize package size (takes longer) check box.

      • General

        Disable the Endpoint Security Client user interface for unattended machines, such as ATMs.

        To learn about packages for ATMs, see sk133174. By default, the client user interface is included in the package.

      • Dependencies Settings

        Select the dependencies to include in the package:

        • .NET Framework 4.6.1 Installer (60 MB) - Recommended for Windows 7 computers without .NET installed.

        • 32-bit support (40 MB) - Selected by default. Recommended for 32-bit computers.

        • Visual Studio Tools for Office Runtime 10.050903 (40 MB) - Recommended if the package includes Capsule Docs.

        • Smart preboot (190 MB) - Enables the Easy Unlock feature. It allows you to Accept or Reject a Network One-Time Logon request or a Network Password Change request from a user that has forgotten the login credentials of the endpoint or when the endpoint is locked due to invalid login attempts using incorrect credentials. Such requests are indicated by the icon in the Asset Management > Computers table. See Viewing Computer Information. It is supported:

          • Only with Endpoint Security client version 86.50 or higher.

          • Only on endpoints running Windows OS.

          • Only if the Full Disk Encryption is Check Point encryption. For more information, see Configuring Full Disk Encryption.

        • Smart preboot (190 MB) - Enables the Easy Unlock and Self Unlock features.

          Easy Unlock allows you to Accept or Reject a Network One-Time Logon request or a Network Password Change request from a user that has forgotten the login credentials of the endpoint or when the endpoint is locked due to invalid login attempts using incorrect credentials. Such requests are indicated by the icon in the Asset Management > Computers table. See Viewing Computer Information. It is supported:

          • Only with Endpoint Security client version 86.50 or higher.

          • Only on endpoints running Windows OS.

          • Only if the Full Disk Encryption is Check Point encryption.

          Self-Unlock allows users to unlock their endpoint by scanning a QR code using their mobile device, without Administrator intervention. It is supported:

          • Only with Endpoint Security client version 86.60 or higher.

          • Only on endpoints running Windows OS.

          Note:

          If the endpoint is connected remotely (not in the LAN), ensure that your Endpoint Security Management Server is accessible over the internet. Otherwise, set up a reverse proxy and specify Hide behind IP address under NAT in SmartConsole. For more information, see SmartConsole Help.
          Additional settings for the Self-Unlock feature:

          1. Specify Self-Unlock Settings in Computer Actions.
          2. Enable Self-Unlock for Full Disk Encryption. See Advanced Pre-boot Settings.

      • Anti-Malware Settings

        Select the signature to include in the package.

        This sets the level of Anti-Malware protection from the time that a client gets the package until it gets the latest Anti-Malware signatures from the signature provider:

        • Full - Recommended for installing on devices without high-speed connectivity to the Anti-Malware server.

        • Minimum - Selected by default. Recommended for a clean installation on devices that are connected to the Anti-Malware server.

        • None - Recommended for upgrades only.

   2. Optional: To download the package automatically after the system creates the package, select the Download package when saved check box.
10. Click Finish.

    The system starts to create the package. It can take several minutes depending on the package size. When the package is ready, the system shows the Exported Package created message.

    Note:

    You can duplicate the package configuration for future use. Click the icon.

Export the package or file

In the export package tile, click to download the package or file.

Next step

Continue with Installing the Exported Package or Client.