Fix SNX SSL Network Extender on Mac
Apr 2017
As of Apr, 2017 SNX + Firefox ESR, fails to connect with Java version 1.8.0_131.
Resolution
Downgrade Java version to 1.8.0.121
Steps
- Delete JDK,
$ sudo rm -rf /Library/Java/JavaVirtualMachines/jdk1.8.0_131.jdk - Delete JavaAppletPlugin.plugin,
$ sudo rm -rf /Library/Internet Plug-Ins/JavaAppletPlugin.plugin - Download older version JDK from here – http://www.oracle.com/technetwork/java/javase/downloads/java-archive-javase8-2177648.html#jdk-8u121-oth-JPR
- Install JDK and connect to the VPN using firefox ESR
Previously
List of things to try when SNX Network extender fails to connect.
sudo rm -rf /etc/snx sudo rm `which snx`
That fixed my issue of “Gateway fingerprint verification failed. Please contact you system administrator” message.
Other solution could be using snx from command line to accept fingerprint
user@pc:~$ snx -s my-checkpoint-server -u username Check Point's Linux SNX build XXXXXXXXXXXX Please enter your password: SNX authentication: Please confirm the connection to gateway: my-checkpoint-server VPN Certificate Root CA fingerprint: AAAA BBB CCCC DDD EEEE FFF GGGG HHH IIII JJJ KKKK Do you accept? [y]es/[N]o:
Official complete Java uninstall
Source: https://www.java.com/en/download/help/mac_uninstall_java.xml
sudo rm -fr /Library/Internet\ Plug-Ins/JavaAppletPlugin.plugin sudo rm -fr /Library/PreferencePanes/JavaControlPanel.prefPane sudo rm -fr ~/Library/Application\ Support/Java
References
- http://kenfallon.com/check-point-ssl-network-extender/
- http://vpn.cps.k12.il.us/documents/MACOS_RemoteAccessTroubleshootingGuide.pdf
