See Mobile Access R77 Versions Administration Guide. Also the gateway must be configured appropriately. To be able to use SNX with the gateway there must be the correct license there (Mobile Access Blade). Later gateway versions (R75.30 till the current R77.30) contain the up-to-date version of SNX available at the time of the gateway release but I think that SNX was not substantially updated during these gateway releases. Till the gateway version R75.20 there is an SNX update hotfix available on Check Point downloads with links in sk65210 - SSL Network Extender E75. This means that the primary place from which is SNX distributed to client machines is the Check Point VPN gateway. Then, after your agreement SNX is downloaded and installed using a Java Applet. You first authenticate to the VPN gateway using a normal web form. the terms and conditions of this download agreement. By clicking on the 'download' button, you expressly agree to be bound by. Product Check Point Mobile, Endpoint Security VPN, SecuRemote. SNX as a classical SSL VPN client is a thin client which is supposed to be installed over a session when you first connect from your web browser to the VPN gateway. E85.20 Check Point Remote Access VPN Clients for Windows. Short answer: A standalone SSL Network Extender (SNX) installer is not available from the official Check Point downloads.