topic Re: CP 5100 Series R80.30 SecureRemote drops after 17secs in SASE and Remote Access

CP 5100 Series R80.30 SecureRemote drops after 17secs

Sparks — Fri, 01 May 2020 05:30:20 GMT

Hi Checkpoint,

My VPN Client SecureRemote drops after reaching 17secs of being connected. I'm Using vE80.90, vE82.40, vE82.50 client.

But when i use Endpoint VPN, no issue encountered.

May i know how to resolve this?

Thanks.

Spark

Re: CP 5100 Series R80.30 SecureRemote drops after 17secs

Shay_Levin — Sun, 03 May 2020 07:34:19 GMT

Hi,
Please post this again to the Remote Access Area
https://community.checkpoint.com/t5/Remote-Access-Solutions/bd-p/remote-access

Re: CP 5100 Series R80.30 SecureRemote drops after 17secs

PhoneBoy — Mon, 04 May 2020 05:00:30 GMT

Or you can just move it there like I did. 🙂

Re: CP 5100 Series R80.30 SecureRemote drops after 17secs

PhoneBoy — Mon, 04 May 2020 05:01:03 GMT

Not sure how much this applies to SecuRemote, but: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk44075

Re: CP 5100 Series R80.30 SecureRemote drops after 17secs

Shehan_Wickrama — Mon, 04 May 2020 05:18:15 GMT

Hi,

You can do the following to resolve the issue sk78180

On all involved VPN Gateways that share the same encryption domain, modify the
$FWDIR/conf/trac_client_1.ttm file:
1. Connect to CLI on the VPN Gateway.
2. Backup the current file:
[Expert@HostName]# cp $FWDIR/conf/trac_client_1.ttm $FWDIR/conf/trac_client_1.ttm_ORIGINAL
3. Modify the current file:
[Expert@HostName]# vi $FWDIR/conf/trac_client_1.ttm
from
:automatic_mep_topology (

    :gateway (
        :map (
             :false (false)
                 :true (true)
                    :client_decide
                        (client_decide)
)
:default (true)
)
)
to
:automatic_mep_topology (
      :gateway (
            :map (
              :false (false)
                    :true (true)
:client_decide (false)
)
:default (false)
)
)

Re: CP 5100 Series R80.30 SecureRemote drops after 17secs

Sparks — Mon, 04 May 2020 14:11:01 GMT

I've done all the steps but still not able to connect via secuRemote.

here's the scenario.

when i used the Endpoint Security client.. i got the IP range of 17x.x.x.x/24 as default IP Office mode address and I'm able to connect to site.

client version e80.90

Endpoint Security Vpn

but when i use the secuRemote i got the IP range of 192.168.5.x/24 my connection drops after 17secs.

client version used for secuRemote. e80.90, e80.92 , e82.40 e82.50, e82.10 e

Thank you.

Re: CP 5100 Series R80.30 SecureRemote drops after 17secs

PhoneBoy — Mon, 04 May 2020 16:23:01 GMT

Remember that SecuRemote doesn't provide an Office Mode address by design.
Have you configured IP Pool NAT?
I know this works as I did it recently.
See: https://community.checkpoint.com/t5/Remote-Access-Solutions/Quick-Primer-on-How-to-Configure-your-Gateway-for-SecuRemote/m-p/79081

Re: CP 5100 Series R80.30 SecureRemote drops after 17secs

Sparks — Thu, 08 Oct 2020 04:00:32 GMT

I tried to use the endpoint security vpn. and its working now. i can access local area connection. but i'm not able to access tunnel going to azure. please see link to another issue.

https://community.checkpoint.com/t5/Remote-Access-VPN/Remote-access-VPN-cannot-access-Azure-Tunnel-But-the-local-area/m-p/98495#M4018

Thanks