topic Failed Distribution Certificate RA VPN in Firewall and Security Management

Failed Distribution Certificate RA VPN

rdinata01 — Tue, 28 Feb 2023 17:41:30 GMT

Dear All

I want to ask related my case, and may be anyone know about this issue can give me advise or solution

Currently we are using RA Vpn with certificate internal for authentication and now we find issue related RA VPN certificate distribution , when we try to distribute certificate and send email to our user, the registration key is failed to send with capture below,

and for additional information,
1.we use 2 gateways as vpn on different site (1pdc, 1HQ) and connected in 1 same fw mgmt for ex 10.1.1.1
2.we use 2 jump host/ terminal server (1pdc, 1drc) for access our smart console

3.we already deploy and use this ra vpn for 4 month and working properly for send cert and access

but now we have problem in 1 jump host in drc make we strange, when we try to send / distribute certificate from fwm 10.1.1.1, its always failed with this info,

But if we try with our jump host in pdc, its normal, even though it uses the same fwm 10.1.1.1 like on jump host drc

and we already try to reinstall our smart console in drc, but still failed, as i think the process distribution and send mail is should do by fwm right ? not from jump host or endpoint we open smart console.

CMIIW and Thanks

Re: Failed Distribution Certificate RA VPN

PhoneBoy — Tue, 28 Feb 2023 19:18:12 GMT

Pretty sure this all happens through management (not SmartConsole machine).
What version/JHF level?

Re: Failed Distribution Certificate RA VPN

rdinata01 — Wed, 01 Mar 2023 05:31:58 GMT

Hi @PhoneBoy

Currently our fwm using R80.40 T77

Re: Failed Distribution Certificate RA VPN

PhoneBoy — Wed, 01 Mar 2023 17:45:14 GMT

I just want to make sure I understand your problem correctly.
You are using numerous "jump hosts" (presumably via RDP) to access the same management server (10.1.1.1)
Not a management server with the same address, but the exact same management server in both cases.
When you attempt to perform this task from one of the jump posts, you get the problem described.
When you attempt to perform this task from the other jump hosts, the operation succeeds.
Am I restating the problem correctly?

In any case, I recommend the following:

Install the latest Recommend JHF for R80.40 (Take 77 is more than two years old): https://sc1.checkpoint.com/documents/Jumbo_HFA/R80.40/R80.40/R80.40-List-of-all-Resolved-Issues.htm
Install the latest R80.40 SmartConsole on the relevant jump hosts: https://sc1.checkpoint.com/documents/Jumbo_HFA/R80.40_SC/R80.40/R80.40_Downloads.htm?tocpath=_____2

If you're still having issues after doing these things, I recommend a TAC case.