Support Center > Search Results > SecureKnowledge Details
Mobile Access Portal and Java Compatibility Technical Level
Solution

Important

This SK brings Mobile Access Portal Agent version 800007040, which resolves a security issue that allows a remote attacker acting as a Man-in-The-Middle to hold the hash of a portal user’s domain credential (only the hash, not the actual password). To be protected from this, you should ensure the latest Mobile Access Portal Agent is installed on all your security gateways. To check the version number, run this command from the Expert mode:

# cat $CVPNDIR/htdocs/SNX/CSHELL/cshell_ver.txt


The Check Point Mobile Access Portal offers a variety of on-demand client technologies, including SSL Network Extender, Compliance Scan and Secure Workspace.

The on-demand technologies are downloaded and invoked by the Mobile Access Portal Agent. While for Internet Explorer browser the Portal Agent is implemented as an ActiveX control, for all other web browsers it is implemented as standalone Java application.

Note: There is no Mobile Access Portal Agent version for the IPsec VPN portal. Users may work with this portal from Internet Explorer only.

This table outlines supported platforms and operating systems:

Operating Systems Web browsers
Internet Explorer Edge / Edge Chromium Chrome FireFox Safari
Windows Supported Supported Supported Supported N/A
Linux N/A N/A Supported Supported N/A
macOS N/A N/A Supported N/A Supported


Mobile Access Hotfix Downloads

Notes:

  • To download some of the packages, you need to have a Software Subscription or Active Support plan.
  • Mobile Access Portal Agent is available starting from R80.40 Security Gateway out-of-the-box.
    For lower versions of Security Gateway, an appropriate hotfix should be installed. The hotfix can be installed only on top of R80.20 Jumbo Take 33 or higher, or R80.30 GA.
  • This Hotfix is applicable for the 3.10 kernel.
  • Deployment with CPUSE is the only available way to install the hotfix.
  • IPSec SNX is only supported with Internet Explorer and not with Chrome/Firefox.
  • Future Jumbo Takes might include content that will conflict with this Hotfix. Installing such a Jumbo Take on a system with this hotfix will fail and yield a relevant error. In such a case,  contact Check Point Support.
  • We strongly recommend to install the latest version of the Hotfix mentioned in this SK article. Previously released versions will receive limited support.


Hotfix Installation Package

Platform/Version Hotfix Release Notes 
R80.20 with Jumbo Take 183 or higher
(TGZ) (CPUSE)

(PDF)
R80.30 with Jumbo Take 226 or higher
(TGZ) (CPUSE)

(PDF)
R80.40 Mobile Access Portal Agent is available in R80.40 Security Gateway out-of-the-box.


Hotfix Installation CPUSE Identifier

To install the hotfix via CPUSE in Gaia portal or CPUSE CLI use the identifiers listed in the table below:

Platform/Version CPUSE Identifier
R80.20 with Jumbo Take 183 or higher Check_Point_R80.20_jhf_T183_MABDA_sk113410_FULL.tgz 
R80.30 with Jumbo Take 226 or higher Check_Point_R80.30_jhf_T226_MABDA_sk113410_FULL.tgz


Supported Platforms and Prerequisites

Windows

  • Windows 7
  • Windows 8.1
  • Windows 10 
Windows users are required to have Java installed. Portal Agent can work with:
  • Oracle JRE versions 8
  • Oracle JDK versions 11 – 19
  • OpenJDK versions 11 – 19

Linux

  • openSUSE Leap 42.1, 42.2, 42.3, Leap 15, Leap 15.1
  • CentOS 7 7.3 – 7.6
  • Fedora 24 – 30
  • Ubuntu 16.04 - 22.04
  • RHEL 7.3 – 7.6 (Desktop and Workstation)

Refer to sk119772 - Mobile Access Portal Agent Prerequisites for Linux.

macOS

  • macOS 10.13 High Sierra
  • macOS 10.14 Mojave
  • macOS 10.15 Catalina
  • macOS 11 Big Sur
  • macOS 12 Monterey
  • macOS 13 Ventura

macOS users are required to have Java installed. Portal Agent can work with:

  • Java Development Kit (JDK) version 8
  • Oracle JDK versions 11 – 19
  • OpenJDK versions 11 – 19
Important: Only X64 version of Java is supported on Mac with M1/M2 chips (ARM version of Java is not supported).


Note for R80.10 users:

Pay attention to sk117673 - Mobile Access Portal Agent for Google Chrome asks to re-install even after it was properly installed.

Note for locally and centrally managed SMB appliances [Embedded Gaia / Quantum Spark]:

This feature is not included in the product. If you need it, submit a Request for Enhancement.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment