Last month I had no other alternative but to reach a server through a Check Point ’s VPN. Fortunately the editor provides a Linux client to access its proprietary stack.

The version I found to work on my Ubuntu 11.04 is the SSL Network Extender (SNX) R71 package that can be downloaded there ( source  ).

Just for reference, the build working for me is numbered 800005013 , and here is a copy of what to expect when the connection succeed: 

 1$ snx -s vpn.example.net -u my_user
 2Check Point's Linux SNX
 3build 800005013
 4Please enter your password:
 5
 6SNX - connected.
 7
 8Session parameters:
 9===================
10Office Mode IP      : 10.32.10.23
11DNS Server          : 10.168.10.1
12Secondary DNS Server: 10.168.10.2
13Timeout             : 3 hours

4 archived comments

Comments are closed. These were posted on Disqus, and are archived here.

  1. manu

    Well, this sounds quite easy the way you explain it, but on my side I still get a SNX: Connection aborted. after a while, and I just can't connect to the VPN the way I do under XP. :o

    I would add that the installation needs to be sudoed, since files are created on /etc/snx, etc.
    So, after :

    chmod +x snx_install*.sh

    run :

    sudo ./snx_install.sh

    I didn't understand why there are other Linux22 or 30 shell scripts. No documentation found in the zip nor on the Check Point site...

    BTW, do you have a CPDIR variable initialised ? And, in this case, what is its value ?
    Same for a FWDIR ?

    Thank you Kevin.

    1. Kevin Deldycke Author

      @manu: after decompressing the .tar.gz file downloaded from the Check Point website, the script I ran was snx_install_linux30.sh. The snx_install.sh is an exact copy of the latter:

      $ tar xvzf ./SNX_for_VPN1_Win7.tgz
(...)
$ md5sum *
5e1ec2eb18dc42f5217a67b50799052d  cashell_ver.txt
381dd25826c43f97e3f36308368fa8e6  cpextender.msi
a705310db23ba28115eb13949b9eb63d  CShell.cab
da237199d2e6fbfc0d1b73af9417e461  CShell.jar
a6472bb9ed86849b6a29d2c6d52ff64b  extender.cab
1ed18a7c9c02e1c2517c59305d0a0c2a  slim_ver.txt
97456b093c7f8bebaaae2492b8c36a8d  SNX4LINUX30.jar
2d02ad5819dcd4e9678dce58a33f1ce6  SNX4LINUX.jar
c8b79a1e2896ef72ff17759dd67bdffd  SNX4TIGER.jar
7d4bc06526a0ec13287417e58ffe9d65  SNX.cab
fcd3d5925eb4dc2a01c8e10e30eb58ab  SNX_for_VPN1_Win7.tgz
99ac347c5e53126b0df2ac00fbba1c4c  snx_install_linux22.sh
5061fdf75b0c760adb2cb8b4a274aba1  snx_install_linux30.sh
e43492296fdd577bc2650785c254a0b5  snx_install_osx.sh
5061fdf75b0c760adb2cb8b4a274aba1  snx_install.sh
8ad9dc1b11be2c2d2974616566eae7f2  SNX.jar

      As for the CPDIR and FWDIR variables, I have absolutely no idea what you're talking about ! :)

      1. manu

        Thanks Kev, for the reply.

        I did try the 3 scripts, for the same result, unfortunately.

        The -g switch turns debugging on, and a snx.elg file is filled with different kind of informations.
        At a certain point, it says :

        CkpRegDir: Environment variable CPDIR is not set.
GenerateGlobalEntry: Unable to get registry path

        This missing CPDIR variable is mentionned here and there on the net, for instance at http://ubuntuforums.org/showthread?t=1221196&page=2

        This is why I was asking you about CPDIR and FWDIR.

        Reading your article, I understand it's been working right out of the box, but it doesn't for many...

        BTW, what is your java distro (Sun/Oracle ?) and version ? The reason why I'm asking is the mention at https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk36681#5 :

        All Linux OSs require Oracle JRE to install.

        Thanks for your help !

  2. kholis

    Thanks. it's work on ubuntu 12.04 :)