topic Re: SSL VPN disconnects after a successful login attempt, if the notebook on hotspot provided by iOS in General Topics

SSL VPN disconnects after a successful login attempt, if the notebook on hotspot provided by iOS

AkosBakos — Wed, 14 May 2025 12:42:45 GMT

Hi CheckMates,

I experiences a strange behaviour:

Here are the details:

A notebook (both win10 and win11) which is enrolled to Intune
1. the detailed parameters are not available yet
the internet access provied by an iPhone hotspot
SSL VPN disconnects after successful logon

If I change the internet access to a simple basic wifi -> everything works fine.

I know, this is a particular situation therefore I ask you for help. Not 100% sure this belogs to Check Point, but I got the info from this channel.

Thank you in advance for any ideas or tips.

Akos

Re: SSL VPN disconnects after a successful login attempt, if the notebook on hotspot provided by iOS

Lesley — Wed, 14 May 2025 17:38:25 GMT

I have seen the same, tried other provider and then all was OK.

Just make capture on the relevant gateway. Check what public IP is used and tcpdump on the fw. If there is no traffic you can exclude firewall from the scope. If you also capture on client and see https send out and not on the gw we are even more certain.

Re: SSL VPN disconnects after a successful login attempt, if the notebook on hotspot provided by iOS

AkosBakos — Mon, 19 May 2025 07:16:12 GMT

Hi Lesley,

It does not depend on the provider, Customer has tested with different providers.

I will have an on-site session later, so it you have more tips, please share wih me 🙂

Akos

Re: SSL VPN disconnects after a successful login attempt, if the notebook on hotspot provided by iOS

D_W — Mon, 19 May 2025 10:00:14 GMT

Maybe a local routing issue?
Check if the hotspot uses the same ip range as the SSL VPN.

Re: SSL VPN disconnects after a successful login attempt, if the notebook on hotspot provided by iOS

the_rock — Mon, 19 May 2025 20:21:52 GMT

Hey bro,

I see the point @D_W is making, makes sense to me as well.

Andy

Re: SSL VPN disconnects after a successful login attempt, if the notebook on hotspot provided by iOS

Lesley — Tue, 20 May 2025 07:18:39 GMT

You think there is overlap between VPN client subnet and mobile provider network? That would be unlikely I see more then one provider has been tested as a hotspot.

Re: SSL VPN disconnects after a successful login attempt, if the notebook on hotspot provided by iOS

D_W — Tue, 20 May 2025 08:09:45 GMT

Yes I think so 🙂 hotspot creates an ad-hoc network between the phone and the client not between the provider and the client. The phone settings define the network range. I think on iPhone you cannot change it...