diff --git a/pkgs/tools/networking/snx/default.nix b/pkgs/tools/networking/snx/default.nix
new file mode 100644
index 000000000000..7a73314d0e37
--- /dev/null
+++ b/pkgs/tools/networking/snx/default.nix
@@ -0,0 +1,40 @@
+{ stdenv, fetchurl, makeWrapper, libX11, pam, gcc33 }:
+
+let
+  # The proper value for this offset can be found at the top of the snx_install script.
+  archiveOffset = "78";
+  libraryPath = stdenv.lib.makeSearchPath "lib" [libX11 pam gcc33.gcc];
+in
+stdenv.mkDerivation rec {
+  name = "snx-800007027";
+
+  src = fetchurl {
+    url = "https://remote.us.publicisgroupe.net/CSHELL/snx_install.sh";
+    sha256 = "1yq0r8gb6jw5pyfrw3wxvplrxxfhbhgm9ph4gyd754fyn52iwgxv";
+  };
+
+  buildInputs = [makeWrapper];
+
+  unpackPhase = ''
+    tail -n +${archiveOffset} ${src} | bunzip2 -c - | tar xfvp -
+  '';
+
+  buildPhase = ''
+    patchelf --set-interpreter "$(cat $NIX_GCC/nix-support/dynamic-linker)" snx
+  '';
+
+  installPhase = ''
+    mkdir -p "$out/sbin" "$out/libexec"
+    mv snx "$out/libexec/"
+    makeWrapper "$out/libexec/snx" "$out/sbin/snx" --prefix LD_LIBRARY_PATH ":" "${libraryPath}"
+  '';
+
+  meta = {
+    homepage = "https://www.checkpoint.com/";
+    description = "Check Point SSL Network Extender";
+    license = "unknown";
+
+    platforms = stdenv.lib.platforms.linux;
+    maintainers = [ stdenv.lib.maintainers.simons ];
+  };
+}
diff --git a/pkgs/tools/networking/snx/snx_install.sh b/pkgs/tools/networking/snx/snx_install.sh
new file mode 100755
index 000000000000..759f870468d7
Binary files /dev/null and b/pkgs/tools/networking/snx/snx_install.sh differ
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 4786e4e1345d..cafe80758314 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -1531,6 +1531,11 @@ let
 
   smbnetfs = callPackage ../tools/filesystems/smbnetfs {};
 
+  snx = callPackage_i686 ../tools/networking/snx {
+    inherit (pkgsi686Linux) pam gcc33;
+    inherit (pkgsi686Linux.xlibs) libX11;
+  };
+
   stardict = callPackage ../applications/misc/stardict/stardict.nix {
     inherit (gnome) libgnomeui scrollkeeper;
   };