topic SNX with logon on MA portal using internal certificates in SASE and Remote Access

SNX with logon on MA portal using internal certificates

Anton_Kazantsev — Thu, 30 Nov 2017 13:59:34 GMT

Another case on my testing enviroment. Trying to connect with SNX by login on mobile acces portal using internal certificate. While pushing "Connect" button, SNX fails to connect with reject action and errors in server logs: Error in disconnecting user in reason, and SNX connection failed in description.

If I login on MA portal using username/password, SNX connects successfuly. And I can use my native applications.

I'm using new SNX version with cshell, thats listen on localhost:14186

What I can't use internal certificates with new SNX? Old-good snx works fine

Re: SNX with logon on MA portal using internal certificates

PhoneBoy — Thu, 30 Nov 2017 18:02:32 GMT

Possible you may need a hotfix to address this per the following SK: SNX connection from command line fails with "SNX: Authentication failed" when using a certificate

Re: SNX with logon on MA portal using internal certificates

Anton_Kazantsev — Thu, 30 Nov 2017 20:34:26 GMT

It's sk101588? It applicable if I use SNX from cli. But I use it from browser with new cshell deployment agent. What name of the patch is? Maybe it already installed

Re: SNX with logon on MA portal using internal certificates

PhoneBoy — Thu, 30 Nov 2017 21:59:51 GMT

I imagine the fix is similar in both the CLI and Browser case.

The name of the hotfix is unique to your specific version.

The internal notes don't mention any currently supported version.

I would follow-up with the TAC.