Java on OS X 10.9 Mavericks: cannot VPN Remote Access through Check Point "SSL Network Extender" (SNX)

Hi guys, I got the same issue while running JRE 7 45.

Actually the solution that I found is more then easy:

1. Close Safari and reopen it

2. goto "Preferences"

3. select "Security"

4. select "Manage Website Settings"

5. select "Java" tab

6. set the line which include your Mail Portal's address to "Run in Unsafe Mode"

7. click "Trust"

8. get back to your browser and select your Mail Portal

9. I received the message that a new version of SNX is available, downloaded and installed it (Admin pwd was asked)

10. it should work.

Gary

Thanks. Your suggestion worked for me 🙂

Thanks ever so much. I really need my VPN access to the hospital for work and was very frustrated after upgrading to Mavericks and finding i could no longer access the system. This solution also worked for me.

Read the post about a work around using Safari Preferences but when I open 'Manage Website Settings" there is no Java tab.

Hi dear,

1) check that your Java Runtime is well installed and enabled, go to this URL and run the Verify Java Version test : http://www.java.com/en/download/installed.jsp

2) if NO, installed it and repeat 1) (to be sure)

3) if YES then apply my procedure. once you are on the "Security" page, you should see in the left panel a line saying

java

Version Java 7 Update 45

4) Click on the "Java" Line in the left panel, it should update the "Configured Websites" panel on the right panel.

5) set the line which include your Mail Portal's address to "Run in Unsafe Mode"

6) click "Trust"

7) get back to your browser and select your Mail Portal

Bingo .... I Hope

Gary

All went well Gary.

Where is the Mail Portal

Also, I am heading to China in a few days to teach for a year. I have Viscosity downloaded on my Mac Book Pro (Maverick) and a local business is allowing me to use their VPN.

Can I now (which wasn't working previously) open Viscosity and connect that way?

Thanks.

Deborah

Hi Deborah,

happy to know that your Java is up and running. You may read "Mail Portal" as the URL of the mail server of your organisation. Actually you found its name in step 7) of my previous message.

Viscosity is a VPN client which I don't know, so I can't brief you on this. The solution I've presented here applies to a specific version of Java and the Checkpoint client (which is not duly signed and hence requires the Safari Security checks to be disactivated for it).

Your problem was likely an installation or activation issue with Java RT. Nevermind, it is solved. You may try putting the Security setting back to "Run in Safe Mode", unless Viscosity has the same signature issue as Checkpoint.

Have a nice stay in China.

Gary

Actually its not working for me. its still giving me same error on - ioexcpetion . I am trying use VDI remote desktop.

Even with this method, I still have a problem with my SSL Network Extender.

It's blocked on connecting after the authentication.

Java works without problems, I can use it on other websites.

Somebody has another solution ?

Hi dear,

1) could you please describe what really happens,

2) did you perform all the steps as described in my original post ?

Gary

Hi Gary,

When I try to connect through the SNX I'm blocked on "SNX - Checking Status"

I performed all the steps in your original post, and for information my Checkpoint firewall is running R77.10 version.

Thomas

Hi all,

I've just updated Java to Java 7 update 51.

The problem was the same even with the Unsafe mode.

I found this SK which solved my problem : http://supportcontent.checkpoint.com/solutions?id=sk97987

You have to go to Java settings into System Preferences and add your URL to the exception list and everything will work.

This worked by following the steps you detailed. Thank you!

Gary

Thanks, this worked perfect!