topic Re: Help in troubleshooting checkpoint endpoint issue in Endpoint

Help in troubleshooting checkpoint endpoint issue

lemm — Fri, 27 Sep 2024 08:15:59 GMT

Hi Guys,

I am able to connect to checkpoint client successfully but once connected successfully, there is no traffic for sometime. it may be 2 mins or even upto 30 mins. I collected the trac.log but i am unable to identify the issue. Which log can help me check what could be causing the issue ?

Re: Help in troubleshooting checkpoint endpoint issue

_Val_ — Fri, 27 Sep 2024 08:45:44 GMT

GW and client versions, some details of your Remote Access VPN configuration? Office Mode or not? Give us more details, please

Re: Help in troubleshooting checkpoint endpoint issue

Lesley — Fri, 27 Sep 2024 10:52:48 GMT

This

And also was debug enabled in the client when you collected the logs? (!make sure debugging is disabled when you are done big performance factor)

More clients have this issue or only 1?

What do you see in firewall logs if you search on Office mode ip, public ip or username?

Re: Help in troubleshooting checkpoint endpoint issue

lemm — Fri, 27 Sep 2024 12:01:57 GMT

GW ver :R81.10

client version is 986102705

Yes in office mode

While checking helpdesk log i could see "Incorrect VNA settings during roaming flow - restarting VNA adapter(tcp connections won't survive)."

In Trac log , observed the below (not sure if this is an error or not )

TcpMultiPipe::socket_rcv_cb: [SEVERE]: Failed to read data from socket: Connection Reset by peer
[tcpserver] TcpMultiPipe::socket_onerror_cb: called the err func, reas was 343

Re: Help in troubleshooting checkpoint endpoint issue

lemm — Fri, 27 Sep 2024 12:08:19 GMT

yes, debug was disabled.

everyone connected to vpn have this issue 😞 Also i dont see anything in firewall logs for office mode IP

Re: Help in troubleshooting checkpoint endpoint issue

lemm — Fri, 27 Sep 2024 12:09:32 GMT

GW version :r81.10

client version is 986102705

Office mode is configured

Re: Help in troubleshooting checkpoint endpoint issue

_Val_ — Fri, 27 Sep 2024 13:28:22 GMT

Build 986102705 is Endpoint client version E84.70, which is EOL. Use one of the supported Endpoint clients.

Also, sk159192 seems to be relevant to your issue. However, I stick to my recommendation, use a later and support Endpoint client version, please.

Re: Help in troubleshooting checkpoint endpoint issue

lemm — Fri, 27 Sep 2024 13:30:19 GMT

thanks for the reply Val,

however if the versions are not compatible, it should not work at all right ? That is not the case here unfortunately.

Re: Help in troubleshooting checkpoint endpoint issue

the_rock — Fri, 27 Sep 2024 13:53:28 GMT

Hey @lemm

To me, logically, if people can connect and no access afterwards, that would 100% indicate that something in the rules is missing to allow the access. How do you have rulebase configured for this?

Andy

Re: Help in troubleshooting checkpoint endpoint issue

Lesley — Fri, 27 Sep 2024 15:46:36 GMT

Just upgrade there is no reason not to do it.

"however if the versions are not compatible, it should not work at all right"

This is not true and not a valid argument to not update. There are many issues solved regarding unstable connections it is not that simple that is does or does not work.

Re: Help in troubleshooting checkpoint endpoint issue

_Val_ — Mon, 30 Sep 2024 08:06:06 GMT

This is up to you. Your Endpoint client is End Of Life, and it causes issues. Before anything else, you may want to install a supported version. If you find this suggestion unreasonable, it will be harder to assist you.

Thanks for your consideration