Installing UserCheck Client

After configuring the clients to connect to the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources., install the clients on the user machines.

1. Get the UserCheck Client MSI file from the Security Gateway in one of these ways:

   Download the UserCheck Client from the Security Gateway using an SCP client

   Important - The SCP user must have the default shell /bin/bash in Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. OS on the Security Gateway.

   1. Go to this directory:

      /opt/CPUserCheckPortal/htdocs/UserCheck/client/

   2. Download this file:

      Check_Point_UserCheck.msi

   Download the UserCheck Client from the Security Gateway object in SmartConsole

   Important - Before you can use this link, you must install an Access Control policy at least one time so that the UserCheck Portal starts.

   1. From the left navigation panel, click Gateways & Servers.

   2. Double-click the Security Gateway object.

   3. From the left tree, click General Properties.

   4. Enable at least one of these Software Blades:

      • Data Loss Prevention Check Point Software Blade on a Security Gateway that detects and prevents the unauthorized transmission of confidential information outside the organization. Acronym: DLP.

      • Access Control:

        • Application Control Check Point Software Blade on a Security Gateway that allows granular control over specific web-enabled applications by using deep packet inspection. Acronym: APPI.

        • URL Filtering Check Point Software Blade on a Security Gateway that allows granular control over which web sites can be accessed by a given group of users, computers or networks. Acronym: URLF.

        • Content Awareness Check Point Software Blade on a Security Gateway that provides data visibility and enforcement. Acronym: CTNT.

      • Threat Prevention:

        • Anti-Bot Check Point Software Blade on a Security Gateway that blocks botnet behavior and communication to Command and Control (C&C) centers. Acronyms: AB, ABOT.

        • Anti-Virus Check Point Software Blade on a Security Gateway that uses real-time virus signatures and anomaly-based protections from ThreatCloud to detect and block malware at the Security Gateway before users are affected. Acronym: AV.

        • Threat Emulation Check Point Software Blade on a Security Gateway that monitors the behavior of files in a sandbox to determine whether or not they are malicious. Acronym: TE.

        • Threat Extraction Check Point Software Blade on a Security Gateway that removes malicious content from files. Acronym: TEX.

        • Zero Phishing Check Point Software Blade on a Security Gateway (R81.20 and higher) that provides real-time phishing prevention based on URLs. Acronym: ZPH.

   5. From the left tree, click UserCheck.

   6. In the section UserCheck Client, click the link Download Client.

   7. The download opens in your default web browser.

2. Install the UserCheck Client on the user endpoint computers.

   You can use any method of MSI mass configuration and installation that you select.

   For example, you can send users an email with a link to install the client. When a user clicks the link, the MSI file automatically installs the client on the computer.

   Notes: The installation is silent. Reboot is not necessary. To install the UserCheck Client for all user accounts on a Windows computer, see sk96107. To uninstall the UserCheck Client from a Windows computer, see Uninstalling UserCheck Client.