> Source: [sk182226](https://support.checkpoint.com/results/sk/sk182226)

# sk182226 - Enable SCV in Remote Access VPN client for macOS

| Property | Value |
|----------|-------|
| Solution ID | sk182226 |
| Date Created | 2024-04-19 |
| Last Modified | 2026-01-27 |
| Technical Level | General |
| Products | Endpoint Security |
| Versions | E89.X, E88.X |
| OS | macOS |

## Solution

The standalone Remote Access VPN client for macOS E88.40 supports the Secure Configuration Verification (SCV ) feature. This feature is presented as Early Availability (EA) and is turned off by default. The SCV policy defines the compliance criteria for a VPN connection on the device. For more information, see [Secure Configuration Verification (SCV)](https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_RemoteAccessVPN_AdminGuide/Content/Topics-VPNRG/Secure-Configuration-Verification-Advanced.htm?tocpath=_____12).  

**Important:** The feature is supported starting from macOS 11 (Big Sur)

To enable the SCV feature:
--------------------------

1. Configure the SCV policy on the Security Management Server or Multi-Domain Security Management Server:

**Note:**SCV policy for Windows cannot be used on macOS devices.

1.
   1. Connect to the command line on Security Management Server or Multi-Domain Security Management Server.
   2. Login to the Expert mode.
   3. On a Multi-Domain Security Management Server, switch to the context of the Domain Management Server.  
      `[Expert@HostName]# mdsenv <Domain_Name>`
   4. Back up the $FWDIR/conf/local.scv file.  
      `[Expert@HostName]# cp $FWDIR/conf/local.scv $FWDIR/conf/local.scv_ORIGINAL`
   5. Edit and configure the $FWDIR/conf/local.scv file.  
      `[Expert@HostName]# vi $FWDIR/conf/local.scv`  

      1. Add `:SCVNamesMac` and `:SCVPolicyMac` sections.   
         For example (The following command snippet of the SCV policy checks whether some applications are running):  

         ` :SCVNamesMac (`  
         ` : (OsMonitor`  
         ` :type (plugin)`  
         ` :parameters (`  
         ` :major_os_version_number (13)`  
         ` :minor_os_version_number (2)`  
         ` :os_version_operand (">=")`  
         ` :begin_admin (admin)`  
         ` :send_log (alert)`  
         ` :mismatchmessage ("Check your OS version")`  
         ` :end (admin)`  
         ` )`  
         ` )`  
         ` : (ProcessMonitor`  
         ` :type (plugin)`  
         ` :parameters (`  
         ` :begin_or (or1)`  
         ` :begin_and (and1)`  
         ` :ping (true)`  
         ` :Weather (true)`  
         ` :end (and1)`  
         ` :begin_and (and2)`  
         ` :Calculator (true)`  
         ` :Calendar (true)`  
         ` :end (and2)`  
         ` :end (or1)`  
         ` :begin_admin (admin)`  
         ` :send_log (alert)`  
         ` :mismatchmessage ("Please check that the following processes are running: ping and Weather or calculator and calendar")`  
         ` :end (admin)`  
         ` )`  
         ` )`  
         ` : (groupmonitor`  
         ` :type (plugin)`  
         ` :parameters (`  
         ` :begin_and (or1)`  
         ` :"test_group" (true)`  
         ` :"everyone" (false)`  
         ` :end (or1)`  
         ` :begin_admin (admin)`  
         ` :send_log (alert)`  
         ` :mismatchmessage ("You are using SecureClient with a non-authorized user. Make sure you are logged on as an authorized user.")`  
         ` :securely_configured_no_active_user (false)`  
         ` :end (admin)`  
         ` )`  
         ` )`  
         ` : (AntiVirusMonitor`  
         ` :type (plugin)`  
         ` :parameters (`  
         ` :type ("CrowdStrike")`  
         ` :signature ("27.11.2023")`  
         ` :begin_admin (admin)`  
         ` :send_log (alert)`  
         ` :mismatchmessage ("Please update your AntiVirus (use the LiveUpdate option).")`  
         ` :end (admin)`  
         ` )`  
         ` )`  
         ` )`  
         ` :SCVPolicyMac (`  
         ` : (ProcessMonitor)`  
         ` )`
   6. Install the policy on the endpoints.
2. Access the terminal on the macOS device and run these commands:  

   **Note:** **Starting from `E88.50`, the steps below are not required. SCV is replaced by Compliance Blade, therefore select the "`Compliance Engine`" option during the installation wizard:**   
   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk182226/macOS_scv202510240945161.png)  
   1. Stop GUI process and VPN service:  
      `sudo launchctl bootout gui/$(id -u) /Library/LaunchAgents/com.checkpoint.eps.gui.plist`  
      `sudo launchctl bootout system /Library/LaunchDaemons/com.checkpoint.epc.service.plist`
   2. Open registry file in editor:  
      `/Library/Application Support/Checkpoint/Endpoint Connect/registry/HKLM_registry.data`
   3. To enable SCV, set the "`disable_scv`" parameter to "`0`".
   4. To disable SCV, set the "`disable_scv`" parameter to "`1`".
   5. Start GUI process and VPN service:  
      `sudo launchctl bootstrap gui/$(id -u) /Library/LaunchAgents/com.checkpoint.eps.gui.plist`  
      `sudo launchctl bootstrap system /Library/LaunchDaemons/com.checkpoint.epc.service.plist`

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content