topic Win 10 VPN Checkpoint client doesn't traverse pfSense home firewall in SASE and Remote Access

Win 10 VPN Checkpoint client doesn't traverse pfSense home firewall

MauriceS — Wed, 04 Sep 2019 02:44:28 GMT

My employer uses a checkpoint firewall, and I have a home solution using pfSense community edition. The pfSense router on my side is connected to Comcast / XFinity using a Cable Modem, so the pfSense WAN connection gets the IP address (public 24.x.x.x) from Comcast. My VPN client starts trying to connect, gets to 47% and doesn't complete the connection.

I have NAT rules in place for IPSEC (by default done by pfSense) as well as setup a specific rule to poke a hole to the actual VPN server.

What can I do to further troubleshoot this, I took wireshark traces, but am not versed enough in IPSec to troubleshoot it further.

Re: Win 10 VPN Checkpoint client doesn't traverse pfSense home firewall

PhoneBoy — Wed, 04 Sep 2019 16:41:35 GMT

As far as I know, unless you have a fairly restrictive outbound policy, no specific rules should be required.
What rules do you have?
Maybe post the packet traces?

Re: Win 10 VPN Checkpoint client doesn't traverse pfSense home firewall

MauriceS — Thu, 05 Sep 2019 02:11:26 GMT

Something was borked in my pfSense Config, DNS (using unbound) was not working correctly today. I had to restore an old config (thanks to having autobackup) and that restore fixed also the VPN issue.