topic Infinity Portal Delete/Create VPN Site Failing - Trying to Delete with trac.exe in Endpoint

Infinity Portal Delete/Create VPN Site Failing - Trying to Delete with trac.exe

rsingh-a2n — Fri, 14 Jul 2023 17:48:19 GMT

Hi All,

We're going to be changing our trac_client_1.ttm file on the Gateways as per SK103440

For the change to take affect for clients we'll have to delete & recreate the VPN site.

We attempted to do this via push operations from the Infinity Portal for Windows 10/11 x64 endpoints with Harmony Mobile 86.80 and 86.60 but the push operation wasn't really stable or reliable we found (We've asked TAC about it and are waiting to see what they can determine from client logs). We've also verified that the way we formulated the push operations was correct and it *sometimes* worked on test and prod endpoints but not reliably enough for us to comfortably use.

As an alternative we're trying to write a simple batch script to use trac.exe to disconnect, delete, and recreate the site but it doesn't appear to want to delete the site consistently either.

Script lines are as follows:

>cd "C:\Program Files (x86)\CheckPoint\Endpoint Security\Endpoint Connect\"

>trac.exe disconnect -g "FW Cluster Name"

>trac.exe delete -s "Sitename"

>trac.exe create -s "Sitename" -di "SiteDisplayName" -lo "Standard"

This fails on deleting the sitename with message "Connection could not be deleted". Does anyone know what could be causing this?

Thanks,

Rahul

Re: Infinity Portal Delete/Create VPN Site Failing - Trying to Delete with trac.exe

rsingh-a2n — Fri, 14 Jul 2023 20:11:14 GMT

Adding on to this.

This worked with the standalone VPN client.

We tried disabling Compliance blades and Threat prev blades but this didn't have any affect, users can manually delete & recreate sites without issue.

Rahul

Re: Infinity Portal Delete/Create VPN Site Failing - Trying to Delete with trac.exe

the_rock — Fri, 14 Jul 2023 20:41:25 GMT

To add to what Rahul stated, considering that all works fine on barebone VPN client (no EDR capabilities), but not on old SBA (new harmony endpoint), to me at least, it would logically indicate its either a blade or certain file (or line in it) causing this to fail.

As @rsingh-a2n mentioned, we turned off compliance and TE blades, but no luck.

Im not 100% sure what TAC provided, but that did not work either.

Cheers,

Andy