Configuring the Client Package

Due to security considerations, users must approve the fingerprint and certificate DN for all primary Security Gateways in the site. Therefore, clients must connect interactively at least once for each gateway that becomes primary. With this release, a secondary gateway can become primary automatically.

To configure the package for ATMs:

  1. Install non-ATM Endpoint Security VPN on a client machine.

  2. Create a site.

    For each Security Gateway on the site, users have to connect and approve the fingerprint.

    Note - The last connected Security Gateway will be defined as the primary gateway in the generated package deployment.

  3. Go to c:\program files\checkpoint\endpoint and run AdminMode.bat.

  4. Go to VPN Options > Administration tab.

  5. In the Input MSI Package path field, enter the path name of CheckPointEndpointSecurityForATM.msi.

  6. Select Replace user's configuration when upgrading.

  7. In Select a product, select Endpoint Security VPN.

  8. Click Generate.

  9. Save the MSI to the local disk.

  10. Enable No Office Mode on the MSI:

    1. At the Windows command prompt, go to c:\program files\checkpoint\endpoint.

    2. Run this command:

      cpmsi_tool.exe CheckPointEndpointSecurityForATM.msi-NO_OFFICE_MODE1