> Source: [sk107536](https://support.checkpoint.com/results/sk/sk107536)

# sk107536 - Check Point Capsule VPN available for Windows 10

| Property | Value |
|----------|-------|
| Solution ID | sk107536 |
| Date Created | 2015-09-02 |
| Last Modified | 2025-02-23 |
| Technical Level | General |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X |
| Platform | Mobile Devices |

## Solution

?Click Here to Show the Entire Article

Introduction
------------

Check Point Capsule VPN uses SSL. It is available for Windows 10.

**Important: You have to first download an app from Windows store. (** <https://www.microsoft.com/en-us/store/apps/check-point-capsule-vpn/9wzdncrdjxtj>)

To learn how to configure Capsule VPN, refer to "Capsule VPN for Windows Phone 10 and 8.1" in the [Capsule Connect and Capsule VPN Clients Administration Guide](https://downloads.checkpoint.com/dc/download.htm?ID=20361).

FAQ
---

* What is the behavior when a compatible version of Endpoint Security client is installed on the Windows 8 device. Does this VPN plugin then get disabled?  
  > There is no integration between the two. If the user wishes to use Endpoint Security Client, there is no need to use Capsule VPN.
* How does the VPN plugin get upgraded? Who controls the distribution: Microsoft, Check Point or can the user force an upgrade for VPN plugin using his/hers software distribution architecture in the future?  
  > Capsule VPN will be upgraded via Microsoft Store. It cannot be upgraded in another way.
* What realm does VPN plugin use?  
  > VPN plugin uses the default realm. For additional information about realms, refer to [sk86240 (Multiple Authentication Schemes for Mobile Access)](http://supportcontent.checkpoint.com/solutions?id=sk86240).
* Is "On demand" feature available on Windows 8 or 10 phones?  
  > On demand is available for Windows 8.1 and Windows 10. It can be configured via PowerShell, as described below:
  >
  > Automatically Triggering VPN Connections in Windows 8.1 PowerShell cmdlets
  > --------------------------------------------------------------------------
  >
  > Windows 8.1 has the "auto-triggered VPN" feature to easily and automatically connect with corporate virtual private networks (VPNs). The capability is available with Microsoft and third-party inbox VPN clients. User just clicks a corporate application requiring VPN and the network will trigger itself if it is disconnected.  
  > For administrators, you can use PowerShell to manage the VPN profile and perform complex tasks in scripts. Here are useful PowerShell cmdlets for automatically triggering VPN connections in Windows 8.1.  
  >
  > ### Name based triggering. (Good for configuring a lot of name suffixes)
  >
  > **Syntax**   
  > *Add-VpnConnectionTriggerDnsConfiguration \[-Name\] --DnsSuffix \[-DnsIPAddress \] --PassThru*   
  > **Properties**   
  > **Name** is the connection name and cannot be modified.  
  > **DnsSuffix** is the suffix for the triggered VPN connection.  
  > **DnsIPAddress** is the IP-Address/URL of the remote server to which the connection is to be established.  
  >
  > If you want to remove name suffixes, try the command:  
  >
  > *Remove-VpnConnectionTriggerDnsConfiguration \[-Name\] --DnsSuffix -PassThru*   
  >
  > ### Application based triggering
  >
  > * **How to add applications to the VPN profile**   
  >
  >   **Syntax**   
  >   *Add-VpnConnectionTriggerApplication \[-Name\] --ApplicationID -PassThru*   
  >   **Properties**   
  >   **ApplicationID** : Modern apps use their identifier. (For example, Skype app is Microsoft.SkypeApp_kzf8qxf38zg5c.) Traditional software uses the binary installed path. For example, Note is *C:\\Windows\\System32\\notepad.exe*.
  >
  > <br />
  >
  > * **How to remove applications from the VPN profile**   
  >
  >   *Remove-VpnConnectionTriggerApplication \[-Name\] --ApplicationID -PassThru*
  >
  > ### Trusted networks for auto triggered VPN connections
  >
  > *Add-VpnConnectionTriggerTrustedNetwork \[-Name\] \[-DnsSuffix\]*   
  >
  > *Remove-VpnConnectionTriggerTrustedNetwork \[-Name\] \[-DnsSuffix\]*   
  >
  > **When you need to revert back to default auto-population, try:**   
  >
  > *Set-VpnConnectionTriggerTrustedNetwork \[-Name\] \[-DefaultDnsSuffixes\]*   
  >
  > In addition, you cannot create multiple auto-triggered profiles in a computer. Because one enabled profile will cause other subsequent trigger-capable profiles to be disabled.

**Note**: We currently do not support using Endpoint Security Client and Capsule VPN for Windows on the same PC simultaneously

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content