@foreverkan Your security endpoint team needs to provide you with the vendor's Mac deployment instructions, and ideally a support contact with the vendor who can respond to questions.

E87.60 is an old client, double check internally on that. The current recommended version is E88.40 which came out in June. You can download a DMG here (if your Security team concurs): https://support.checkpoint.com/results/sk/sk117536

We don't use the firewall component I found a way to skip that install via an XML file and policy process command as posted here: https://support.checkpoint.com/results/sk/sk117536

What I do is use Composer to create a PKG containing the Endpoint_Security_VPN.pkg (from the DMG) and XML file. A policy installs the PKG and runs the process command to 'inject' the XML file to skip the firewall.

I don't know what authentication your organization uses for Check Point, but if it's tying into your organization's Azure Active Directory/Entra ID, know that Safari 18 broke that authentication. It only works now with Edge or Chromium (unless you have your Security team manually modify files on all your firewalls as a "preliminary" solution from Check Point) if you're using AAD/Entra to authenticate the VPN connection. 

Copy and paste fail, my bad. Second hyperlink should've been: https://community.jamf.com/t5/jamf-pro/checkpoint-endpoint-vpn-client-config-profile-without-firewall/m-p/262489/highlight/true#M241742