Supported Clients and Agents

Multiple Login Option Support

This version supports multiple login options per Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. with multi-factor authentication schemes, for users of different clients and the Mobile Access Check Point Software Blade on a Security Gateway that provides a Remote Access VPN access for managed and unmanaged clients. Acronym: MAB. portal.

For example, configure an option to authenticate with Personal Certificate and Password, or Password and DynamicID for SMS or email.

These features are supported when connected to an R80.40 Security Gateway that has IPsec VPN Check Point Software Blade on a Security Gateway that provides a Site to Site VPN and Remote Access VPN access. or Mobile Access enabled.

Supported Client or Portal	Lowest Supported Version
Mobile Access Portal	R80.10
Capsule Workspace for iOS	1002.2
Capsule Workspace for Android	7.1
Remote Access clients for Windows - Standalone Configuration in which the Security Gateway and the Security Management Server products are installed and configured on the same server. clients	E80.65
Remote Access VPN An encrypted tunnel between remote access clients (such as Endpoint Security VPN) and a Security Gateway. Blade of the Endpoint Security Suite for Windows	E80.65

See the R80.40 Mobile Access Administration Guide or the R80.10 and Higher Remote Access VPN Administration Guide for details.

Clients and Agents Support by Windows Platform

Microsoft Windows

In this table, Windows 7 support is true for Ultimate, Professional, and Enterprise editions. Windows 8 support is true for Pro and Enterprise editions. All the marked consoles and clients support Windows 32-bit and 64-bit.

Check Point Product	Windows 10 ^(*)	Windows 8.1
Remote Access clients E80.x	(E80.62 and higher)	(with 8.1 Update 1)
Capsule VPN Plug-in
SSL Network Extender A secure connectivity framework for remote access VPN to a corporate network. SSL Network Extender uses a thin VPN client installed on the user's remote computer that connects to an SSL-enabled web server on a VPN Gateway. Acronym: SNX.
UserCheck Functionality in your Security Gateway or Cluster and endpoint clients that gives users a warning when there is a potential risk of data loss or security violation. This helps users to prevent security incidents and to learn about the organizational security policy. Client
Identity Agent Check Point dedicated client agent installed on Windows-based user endpoint computers. This Identity Agent acquires and reports identities to the Check Point Identity Awareness Security Gateway. The administrator configures the Identity Agents (not the end users). There are two types of Identity Agents - Full and Light. You can download the Full and Light Identity Agent package from the Captive Portal - 'https://<Gateway_IP_Address>/connect' or from Support Center. (Light and Full)
Identity Agent for Terminal Servers

^(*) Supported Windows 10 versions: 1703, 1709, 1803 for more information see the Detailed Client Releases Information section in sk117536.

Microsoft Windows Server

Check Point Product	Server 2019	Server 2016	Server 2012 R2 64-bit	Server 2012	Server 2008 R2 (+SP1)
UserCheck Client
Identity Agent for Terminal Servers
Identity Collector Check Point dedicated client agent installed on Windows Servers in your network. Identity Collector collects information about identities and their associated IP addresses, and sends it to the Check Point Security Gateways for identity enforcement. You can download the Identity Collector package from Support Center.

Note - Identity Agent for Terminal Servers is also supported on XenApp 6.

Clients and Agents Support by Mac Platform

All support is for Macintosh OS 64-bit.

Check Point Product

macOS 10.14

macOS 10.13

macOS 10.12

OS X 10.11

Identity Agent

SSL Network Extender

Endpoint Security VPN E80.x or higher

(E80.64
and higher)

(E80.62
and higher)

DLP Exchange Agent Support

The R80.40 DLP Exchange Agent is supported on:

Windows Server	Exchange Server
2012 R2 64-bit	2010, 2013
2016 64-bit	2016

For earlier server versions, use the R77.30 DLP Exchange Agent.