TL;DR — The corporate VPN is not the blocker. Check Point Harmony SASE ships a first-party Linux agent (Ubuntu .deb, RHEL/Fedora .rpm, generic .tar.xz)[5], and WatchGuard — which builds its Mobile VPN with SSL client only for Windows and macOS[1] — officially documents connecting with a stock OpenVPN client using a
client.ovpn profile exported from the Firebox[3]. The genuine, unfixable losses are small and cosmetic: JBL QuantumENGINE, Dolby Atmos/Vision, Intel XTU undervolting, and Lenovo's AI Now / Legion Space layer. The one real risk to clear with IT first is Harmony SASE's posture check, which blocks private access when a device fails policy[6] — a policy question, not a technical one.
| Windows vendor software | Linux answer | Verdict | Notes |
|---|---|---|---|
| Harmony SASE 12.10 (Check Point) | Official SASE Agent for Linux[5] | ✓ | Ubuntu 20.04+ .deb, Red Hat 8+ / Fedora 40+ .rpm, generic .tar.xz. ⚠ Posture Check runs client-side and denies private access on failure[6] — confirm your tenant's posture rules aren't Windows-only (AV/disk-encryption checks) before you wipe. |
| WatchGuard Mobile VPN with SSL 2026.2 | OpenVPN / NetworkManager with the Firebox profile[3] | ⚠ | No Linux build exists — current 2026.2.1 is Windows + macOS only, released 07/02/2026[1], and Linux appears nowhere in the install docs[2]. But it is plain OpenVPN: VPN > Mobile VPN > Download Profile, import client.ovpn; two-factor challenge-response works with native OpenVPN clients on Fireware 12.3+[3]. Step-by-step Linux walkthrough exists[4]. |
| Lenovo Vantage Service, Legion Space, Lenovo Now, LenovoCompanion | LenovoLegionLinux ⭐ 3.2k (Jul 2026) + in-kernel lenovo_wmi_* |
⚠ | LLL covers fan curves (10 points), power modes, power limits, rapid charge, battery conservation, Y-logo LED[7]. Mainline caught up: the Lenovo WMI gaming drivers landed for Linux 6.17, exposing Quiet/Balanced/Performance through power-profiles-daemon, Fn+Q or sysfs[8]. ⚠ LLL's own fan control is unverified on gen-8 (2023) and newer hardware[7] — check your model before betting on custom curves. |
| LegionLightingController | L5P-Keyboard-RGB ⭐ 520 (Jul 2026) | ⚠ | 4-zone RGB on Legion 5/5 Pro/Slim and LOQ, 2020–2024, Linux supported (root or a udev rule)[9]. ✗ Legion 7(i) per-key backlights and white-only backlights are explicitly unsupported[9]. |
| Intel XTU (Install_Intel_IPF_XTU, XTU_Installer) | intel-undervolt / throttled |
✗ | There is no Intel-endorsed undervolting path on Linux; the community MSR-poking tools are unofficial, and on recent Intel silicon the voltage interface is locked by firmware/microcode so they simply cannot apply an offset[10]. Power-limit tuning survives via LLL/PPD; undervolting realistically does not. |
| JBL QuantumENGINE 2.5.6 | Nothing vendor-grade; EasyEffects ⭐ 9.9k (Jul 2026) for EQ | ✗ | QuantumENGINE is Windows/macOS/iOS/Android only[12], and JBL is absent from HeadsetControl's device table ⭐ 1.9k[11]. The headset still works as a class-compliant USB audio device under PipeWire; on-device EQ presets, QuantumSURROUND and sidetone are gone. Rebuild EQ yourself in EasyEffects[13]. |
| Nahimic, Dolby Digital Plus OEM, Dolby Vision Access | PipeWire + EasyEffects, optionally seeded from the OEM tuning | ✗ | No Dolby Atmos/Vision decode stack on Linux. Closest thing: speaker-tuning-to-easyeffects ⭐ 62 (Jul 2026) extracts the DAX3 tuning XML shipped in the OEM Windows driver and re-emits it as an EasyEffects preset or a headless PipeWire filter-chain, with Lenovo models among those confirmed[14] — do this before wiping the Windows partition. |
| KillerControlCenter (Rivet/Intel Killer Wi-Fi) | iwlwifi in-tree |
✓ | Intel ships no Linux drivers for Killer wireless parts and points users at the generic Intel wireless driver for the equivalent adapter[15]. Hardware: fine. The Killer app's traffic-prioritisation/bandwidth UI: ✗ gone, and no one misses it. |
| AppUp.IntelArcSoftware (Arc Control) | xe/Mesa drivers; no vendor GUI |
⚠ | Intel states there are no plans to release Arc Control on non-Windows operating systems[16]. Driver support is in-box on modern distros; overlays, capture and tuning UI are not. |
| Epson Connect Printer Setup 1.4.9 | CUPS driverless (IPP Everywhere) + epson-inkjet-printer-escpr/escpr2 |
✓ | Modern Epson units are AirPrint/Mopria/IPP-Everywhere class: cups + cups-browsed + ipp-usb discover and configure the queue with no vendor driver at all[17]. Epson also publishes ESC/P-R printer drivers and Epson Scan 2 for Linux as .deb/.rpm, unsupported but maintained (ESC/P-R manual revised Feb 2026)[18]. ⚠ Epson Connect's cloud features (email-to-print, remote print) are printer-side and web-managed — the Windows setup utility itself has no Linux build and isn't needed once the printer is registered. |
| webOS Dev Manager 1.99.17 (webosbrew) | Same app, Linux build | ✓ | dev-manager-desktop ⭐ 2.4k (Jul 2026) ships x86_64 and ARM64 .deb and AppImage alongside the Windows MSI[19]. Zero-effort port. |
| Lenovo AI Now 1.3, AINowContextWIN11, aimgr | — | ✗ | Microsoft Store packages by construction: Windows-only, no Linux counterpart. Local-LLM needs are already covered by the Ollama install in the same inventory. |
| SENetFilter 1.0.0.1 (no publisher listed) | — | ✗ | A Windows NDIS-layer filter driver bundled by another product; it has no meaning outside Windows and nothing to replace. |
| Microsoft.SecHealthUI / McAfeeWPSSparsePackage / WindowsSubsystemForLinux | — | ✗ | All three are moot after the switch: Defender UI and the McAfee stub are Windows-only by definition, and WSL's entire purpose is served by the host OS. |
No Linux client, no community substitute
Blunt list — accept these as losses, don't go hunting:
- JBL QuantumENGINE — no Linux app, no HeadsetControl support for JBL[11]. Set your presets on Windows first if the headset stores them on-device; otherwise reproduce the EQ curve in EasyEffects.
- Dolby Atmos / Dolby Vision — no licensed decoder for Linux desktop. Atmos-encoded content downmixes; Dolby Vision HDR metadata is ignored.
- Intel XTU undervolting — unofficial only, and usually firmware-locked on recent chips[10].
- Lenovo AI Now / Legion Space / Lenovo Now / LenovoCompanion — the storefront, telemetry, driver-update and NPU-assistant layers have no Linux equivalent. LLL replaces the useful 10% of Vantage[7] and nothing replaces the rest.
- Killer Control Center and Intel Arc Control GUIs — vendor states no Linux plans for Arc Control[16]; Killer gets generic drivers only[15].
- Legion 7(i) per-key RGB, if that's your model — a different protocol that nobody has reverse-engineered[9].
Do before you wipe
- Ask IT to confirm the Harmony SASE tenant's Posture Check profile admits Linux endpoints[6], and get the Linux agent package from Devices > Downloads[5].
- Export the WatchGuard
client.ovpnprofile while you still have the Windows client working[3]. - Dump the OEM Dolby/DAX3 tuning XML off the Windows install for later conversion[14].
- Record your Legion fan curve and power-limit values from Vantage so you can re-enter them in LLL[7].