{"id":388,"date":"2018-12-30T13:06:14","date_gmt":"2018-12-30T13:06:14","guid":{"rendered":"http:\/\/blog.gordonbuchan.com\/blog\/?p=388"},"modified":"2022-05-17T02:22:37","modified_gmt":"2022-05-17T02:22:37","slug":"connecting-to-a-checkpoint-vpn-from-fedora-29","status":"publish","type":"post","link":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/2018\/12\/30\/connecting-to-a-checkpoint-vpn-from-fedora-29\/","title":{"rendered":"Connecting to a Checkpoint VPN from Fedora 29"},"content":{"rendered":"

One of the systems I maintain requires access to a Checkpoint VPN. Until recently, this has meant that I needed a Windows laptop or vm when I traveled. The recipe to connect to the vpn using a command line client called \u201csnx\u201d seems obvious, but is not. Here is how I was able to connect a Fedora 29 Linux machine with version 800007075 of the snx command line client.<\/p>\n

Install the Oracle Java JRE<\/p>\n

Download Linux x64 RPM:<\/p>\n

https:\/\/www.java.com\/en\/download\/linux_manual.jsp<\/a><\/p>\n

Use rpm at the command line instead of using the software installer gui.<\/p>\n

(change version number as needed)<\/p>\n

rpm -ivh jre-8u191-linux-x64.rpm<\/p>\n

dnf install pkgconf-pkg-config<\/p>\n

dnf install libcanberra-gtk2.i686<\/p>\n

dnf install \/lib\/ld-linux.so.2 libX11.so.6 libpam.so.0 libstdc++.so.5 libnsl.so.1<\/p>\n

According to this link:<\/p>\n

https:\/\/unix.stackexchange.com\/questions\/450229\/getting-checkpoint-vpn-ssl-network-extender-working-in-the-command-line<\/a><\/p>\n

versions of the snx command line client > 800007075 are not compatible with recent Linux kernels. So we will obtain a copy of that specific version of the SNX command line client:<\/p>\n

[root@server etc]# cd ~desktop\/tmp\/
\n[root@server tmp]# wget https:\/\/www.fc.up.pt\/ci\/servicos\/acesso\/vpn\/software\/CheckPointVPN_SNX_Linux_800007075.sh -O snx_install.sh
\n–2018-12-30 07:34:08– https:\/\/www.fc.up.pt\/ci\/servicos\/acesso\/vpn\/software\/CheckPointVPN_SNX_Linux_800007075.sh
\nResolving www.fc.up.pt (www.fc.up.pt)… 193.137.24.4
\nConnecting to www.fc.up.pt (www.fc.up.pt)|193.137.24.4|:443… connected.
\nHTTP request sent, awaiting response… 200 OK
\nLength: 973618 (951K) [application\/x-sh]
\nSaving to: \u2018snx_install.sh\u2019<\/p>\n

snx_install.sh 100%[====================>] 950.80K 378KB\/s in 2.5s<\/p>\n

2018-12-30 07:34:26 (378 KB\/s) – \u2018snx_install.sh\u2019 saved [973618\/973618]<\/p>\n

and now we make the script executable:<\/p>\n

[root@server tmp]# chmod 755 snx_install.sh<\/p>\n

run the installation script:<\/p>\n

[root@server tmp]# .\/snx_install.sh
\nInstallation successful<\/p>\n

test a command line connection (use values appropriate for your username and vpnservername)<\/p>\n

[root@server tmp]# snx -s vpnservername -u username@domain.com
\nCheck Point’s Linux SNX
\nbuild 800007075
\nPlease enter your password:
\nSNX authentication:
\nPlease confirm the connection to gateway: *.domain.com
\nRoot CA fingerprint: XXX XXX XXXX XXX XXX XXXX XXXX XXX XXX XXXX
\nDo you accept? [y]es\/[N]o:
\ny
\nSNX – connected.<\/p>\n

Session parameters:
\n===================
\nOffice Mode IP : x.x.x.x
\nDNS Server : x.x.x.x
\nSecondary DNS Server: x.x.x.x
\nDNS Suffix : domain.com
\nTimeout : 12 hours<\/p>\n

Some useful links:<\/p>\n

https:\/\/www.java.com\/en\/download\/linux_manual.jsp<\/a><\/p>\n

https:\/\/kenfallon.com\/checkpoint-snx-install-instructions-for-major-linux-distributions\/<\/p>\n

https:\/\/kenfallon.com\/installing-snx-on-fedora-28\/<\/p>\n

https:\/\/unix.stackexchange.com\/questions\/450229\/getting-checkpoint-vpn-ssl-network-extender-working-in-the-command-line<\/a><\/p>\n

https:\/\/www.fc.up.pt\/ci\/servicos\/acesso\/vpn\/software\/CheckPointVPN_SNX_Linux_800007075.sh -O snx_install.sh<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

One of the systems I maintain requires access to a Checkpoint VPN. Until recently, this has meant that I needed a Windows laptop or vm when I traveled. The recipe to connect to the vpn using a command line client called \u201csnx\u201d seems obvious, but is not. Here is how I was able to connect … <\/p>\n

Continue reading “Connecting to a Checkpoint VPN from Fedora 29”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-388","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/388","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=388"}],"version-history":[{"count":4,"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/388\/revisions"}],"predecessor-version":[{"id":393,"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/388\/revisions\/393"}],"wp:attachment":[{"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=388"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=388"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=388"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}