topic Re: SuperNode Client with Threat Emulation Status Connection error in Endpoint

SuperNode Client with Threat Emulation Status Connection error

PJ_WONG — Fri, 18 Oct 2024 03:55:53 GMT

Hi Checkmates,

As this is a new feature in E88.60.0087 (EPS-57370 in sk182468), I would like to check if anyone has experienced this.

SK182468: https://support.checkpoint.com/results/sk/sk182468

In current environment, we are utilising endpoint superNode & superNode Client so that the "semi-isolated" superNode Client that has no internet access is able to use superNode, as a proxy to connect Endpoint Cloud Server.

Everything is working good (deployment, update, logs) except the following errors at the assets:

- Threat Emulation Status showing error "Connection Error"
- Threat Emulation Reputation Status showing error "Service is not available"
- Attached the screenshot as reference

As I am able to replicate this at my lab environment, so I do not think it is caused by connections drop.

We have involved CP R&D into this but so far there is no breakthrough on the issue.

If anyone has tried this feature, I really appreciate if you can advise on this.

Thank you.

Re: SuperNode Client with Threat Emulation Status Connection error

PhoneBoy — Fri, 18 Oct 2024 13:54:11 GMT

Can you send me the SR in a PM?

Re: SuperNode Client with Threat Emulation Status Connection error

lluner — Fri, 18 Oct 2024 15:49:50 GMT

hi ,

Could test connectivity using C:\Program Files (x86)\CheckPoint\Endpoint Security\Endpoint Common\bin\CheckConnectivity.exe

Re: SuperNode Client with Threat Emulation Status Connection error

lluner — Fri, 18 Oct 2024 15:53:08 GMT

hi PJ_wong

I could use the push operation to repair this customer

Re: SuperNode Client with Threat Emulation Status Connection error

PJ_WONG — Mon, 21 Oct 2024 03:44:35 GMT

Hi lluner,

Unfortunately, "repair client" is not fixing it.

Attached the screenshots for client UI and test connectivity.

Aside from that, TAC has asked to turn on the proxy settings, which I think sometimes "silenced" the error for a while before it came back. This is not consistent and I am still trying to figure out the behaviour.

Thank you.

Re: SuperNode Client with Threat Emulation Status Connection error

PhoneBoy — Tue, 22 Oct 2024 21:29:35 GMT

The TAC case you PMed me seemed to suggest something with TLS versions used might be an issue.

Re: SuperNode Client with Threat Emulation Status Connection error

slegouge — Thu, 21 Nov 2024 15:47:39 GMT

Hello PJ_WONG,

I have the same issue, do you have an update from checkpoint to resolve it please ?

Thank you

Sebastien

Re: SuperNode Client with Threat Emulation Status Connection error

PJ_WONG — Fri, 22 Nov 2024 01:57:03 GMT

Hi Sebastien,

So far the issue is not resolved and we might have to wait for version E88.70 to fix it.

Best Regards,
PJ

Re: SuperNode Client with Threat Emulation Status Connection error

slegouge — Fri, 22 Nov 2024 09:40:21 GMT

Hi PJ_WONG,

Thanks for your feedback, I opened a case but as you advised I think I will have to wait for the next version.

Have a nice day,

Best Regards,

Sebastien

Re: SuperNode Client with Threat Emulation Status Connection error

PJ_WONG — Thu, 27 Feb 2025 08:48:28 GMT

As a solution for this post, my issue is resolved by using E88.61.1058 package from R&D.

I believe version higher than it also contain the patches.