Preserving Modified Default Settings After Upgrade

By default, when you upgrade a Remote Access VPN client version E87.30 or higher, changes to default settings in the trac.defaults file made by an administrator or a user are preserved.

For example, in the trac.defaults file of a Remote Access VPN client version E87.30, a user changed the value of the machine_tunnel_site parameter to the name of a site for machine-only authentication (example: MachineSite). The default value of this parameter is "" (empty string). After an upgrade, the machine_tunnel_site parameter retains the value MachineSite.

Upgrading Remote Access VPN Client Without Preserving Modified Default Settings

Starting from E87.30, to upgrade a Remote Access VPN client without preserving modified default settings, you must run the installation package from Windows Command Prompt and pass the value of a parameter in the package.

To upgrade the Standalone Remote Access VPN client without preserving modified default settings:

Open Windows Command Prompt in the directory where the upgrade package (CheckPointVPN.msi) is located.

Run:

Copy

CheckPointVPN.msi DISABLE_DEFAULTS_MERGE=1

To upgrade the Endpoint Security Client without preserving modified default settings for Remote Access VPN:

Open Windows Command Prompt in the directory where the upgrade package (EPS.msi) is located.
Run:
Copy
```
EPC_DISABLE_DEFAULTS_MERGE=1
```

Known Limitations

Preservation of modified default settings is disabled if you use the VPN Configuration Tool to replace the trac.defaults file in a customized upgrade package