topic Re: Credentials are needed for a secondary tunnel connection in Endpoint

Credentials are needed for a secondary tunnel connection

rampo — Thu, 09 May 2024 13:15:33 GMT

After upgrading to MacOS Sonoma 14.3.1, Endpoint Security VPN spits this error message when I try toestablising an RDP: "Credentials are needed for a secondary tunnel connection".

I've uninstalled the current version and installed E88.30 however the problems stays as is.

By the way, for the site, there were 2 different gateways (the one that is used to connect in first place, which is called FW, and MAESTRO). When I connect, I use FW and the connection is successfully established (this was the case all along), however when I try to connect to my PC using Microsoft Remote Desktop, I see the "Credentials are needed for a secondary tunnel connection" message and this time, "MAESTRO" is automatically selected for as Gateway. If I put my connection information, the connection is denied of course.

At this point, I am considering to install a fresh copy of MacOS Sonoma, which will be very painful 😞

Any help is appreciated.

Re: Credentials are needed for a secondary tunnel connection

PhoneBoy — Thu, 09 May 2024 14:29:10 GMT

I would try deleting and re-adding the site and see if that resolves the issue.
If it doesn't, I suggest a consult with the TAC: https://help.checkpoint.com

Re: Credentials are needed for a secondary tunnel connection

the_rock — Thu, 09 May 2024 14:36:31 GMT

That was also my first thought what Phoneboy said...delete and re-create the tunnel, just to see if the client can "fetch" all the new info from the gateway side.

Andy

Re: Credentials are needed for a secondary tunnel connection

rampo — Thu, 09 May 2024 18:01:03 GMT

Tried removing and adding site however that didn't work.

Can someone explain how come I could connect to the remote network but cannot connect to my PC?

Re: Credentials are needed for a secondary tunnel connection

PhoneBoy — Thu, 09 May 2024 18:49:25 GMT

To read about Secondary Connect: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_RemoteAccessVPN_AdminGuide/Content/Topics-VPNRG/Secondary-Connect.htm

The VPN client believes your PC is reachable behind the MAESTRO gateway.
As such, the client attempts to establish another VPN tunnel to that gateway.
If the gateway is not configured correctly to allow this, the authentication fails.

Which means either Secondary Connect needs to be disabled or the configuration of the MAESTRO needs to be corrected.
Neither of these things can be affected from the client side.

Re: Credentials are needed for a secondary tunnel connection

rampo — Thu, 09 May 2024 19:08:00 GMT

Thank you Admin.

I appreciate your explanation.

Now, all I need to do is convince the admin team that they actually need to take action to fix this 🙂

Re: Credentials are needed for a secondary tunnel connection

the_rock — Thu, 09 May 2024 19:15:49 GMT

Ironically enough, I never remember being able to find option from that link by default on any fw version before, not sure if thats intended behavior...:)

Re: Credentials are needed for a secondary tunnel connection

PhoneBoy — Thu, 09 May 2024 19:37:06 GMT

It might be on by default, but there is still some configuration required for it to work correctly 🙂