Downloading and Installing the Agent and Certificates

Prerequisites

• Network connectivity to required  SASE Agent service URLs.
• Firewall access for required inbound and outbound traffic.
• Open ports based on the configured VPN protocol and tenant region.

For the complete list of required URLs, ports, and protocol details, see sk182251.

In the Downloads page, you can download the Check Point SASE Agent and Certificate. 

To view the Downloads page, access the Check Point SASE Administrator Portal and click Devices > Downloads.

Downloading the Check Point SASE Agent

1. Access the Check Point SASE Administrator Portal and click Devices > Downloads.
2. Click the Agents tab.
   
3. Do one of these:
   • Click Download.
     The system downloads the file.

     Operating System	Download
     MacOS macOS 13 or later	PKG
     Windows Windows 11	Recommended: EXE MSI (for mass deployment) Stable: EXE MSI (for mass deployment) ARM (Supports Private Access mode only): EXE MSI (for mass deployment)
     Linux Ubuntu 20.04 or later  Redhat 8 or later Fedora 40 or later Linux 8 or later	Deb RPM \  RPM (Fedora) tar.xz
     iOS iOS 15 or later	App Store
     Android / Chromebook Android 12.1 or later	Google Play

   • Click Copy Link to copy the download link. Share the link with members.
4. To verify that the downloaded file is authentic, use the Checksum.
5. Deploying the Agent Using an MDM Application.

Downloading the Certificate

1. Access the Check Point SASE Administrator Portal and click Devices > Downloads.
2. Click the Certificates tab.
   
3. Click Activate to activate the SWG root certificate.
4. When the certificate is active, click Download.
   The system downloads a PEM file.