topic Re: MAB sslvpn question from user in SASE and Remote Access

MAB sslvpn question from user

Daniel_Kavan — Fri, 21 Nov 2025 13:52:07 GMT

Hi Mates,

Is there something new in the MAB clients asking users for access to their network?

from userG:

When logging-in to the portal this morning I was greeted with an alert box letting me know that "portal.pheonix.rising.com wants to access your network and any device on it." I blocked the request, because I always block those kinds of requests. I was then informed that I needed to update the CheckPoint Mobile client so I downloaded and ran the installer as usual. It seems that the update does not get installed and I can no longer open the VPN connection.
Do I need to allow portal.pheonix.rising.com to access the network?

I tried ssl40, but I opted not to block access to the local network this time. The software updated automatically and I was able to connect just fine. So, I went back to ssl30 and changed the permissions to allow local network access, reloaded the page, and everything works now.

Re: MAB sslvpn question from user

the_rock — Fri, 21 Nov 2025 13:44:21 GMT

Hey Dan,

Is this for every user?

Re: MAB sslvpn question from user

Daniel_Kavan — Fri, 21 Nov 2025 13:47:11 GMT

Just one experienced user has reported it. He has rebooted, updated to a different version, updated Java, removed all CP services, rebooted again, tried a different version and still got the message, he tried on R81.20 gw then a R82 gw still gets the same message.

Re: MAB sslvpn question from user

the_rock — Fri, 21 Nov 2025 13:46:26 GMT

What OS?

Re: MAB sslvpn question from user

Daniel_Kavan — Fri, 21 Nov 2025 17:01:20 GMT

He had this issue with windows 10. He's now moved onto windows 11. I'll see if he can replicate it will w11.

Re: MAB sslvpn question from user

the_rock — Fri, 21 Nov 2025 17:03:10 GMT

If its just single user issue, then most likely not on the fw side.

Re: MAB sslvpn question from user

Chris_Atkinson — Sat, 22 Nov 2025 01:20:50 GMT

- Do the settings for the VPN allow back connections?

- What software is he seeing the prompt / error in and what Endpoint security solution is the PC running?

Re: MAB sslvpn question from user

flemingh — Thu, 18 Dec 2025 08:33:48 GMT

It seems Chrome changed the Local network access option to ask back at the end of October and Edge has done this at the start of December

Prior to this LNA was just set to allow by default

So if a user clicks block when asked it won't prompt again and you have to manually set it in the browser permissions

This stops it being able to access the Mobile Access Portal Agent on https://localhost:14186

Of course, they don't remember clicking block but when you've got over 1000 SNX users it happens more often than you'd think

Easy to fix, hard to find troubleshooting