topic Re: Remote access VPN hardware/Driver compatibility in SASE and Remote Access

Remote access VPN hardware/Driver compatibility

OU812 — Fri, 14 Feb 2025 22:46:03 GMT

I am assisting a customer that is using the checkpoint remote VPN with a NIC that is not one of the big names. They are having some issues and I noticed someone mentioned in another post that there are certain NIC drivers that are supported and others that are not.

Where can I find that information? The only HCL I found only showed server models.

I want to verify it should work before wasting time troubleshooting.

The NIC is a 10G from Aquantia.

Re: Remote access VPN hardware/Driver compatibility

PhoneBoy — Fri, 14 Feb 2025 23:18:03 GMT

Please provide some more details like:

Version of Endpoint client
Version/patch level of Windows
Exact issues you are seeing

Beyond the requirement for Intel CPU for most functions, there is no HCL for Endpoint/Remote Access.

Re: Remote access VPN hardware/Driver compatibility

the_rock — Sat, 15 Feb 2025 00:15:34 GMT

Personally, I never heard of such limitation for VPN. Last time I checked, there was nothing about it in HCL either. Wjhat kind of issue are you havinbg? Maybe try latest client E88.62 for starters and see if problem is there.

Andy

Re: Remote access VPN hardware/Driver compatibility

OU812 — Tue, 18 Feb 2025 12:59:12 GMT

Thanks. I am working on getting those details. The issue that is being seen is that the link is "Lost" and requires a reboot to recover, I say "Lost" as they have not provided system logs that confirm the physical link is actually going down.

They Isolated it to only happening when the VPN software is installed. It does not even have to be enabled, just installed on the system. If they uninstall the software the issue stops happening.

It is very random and happens at multiple sites and home users that have a 10Gb home router, so there is no common switch, router or cable involved. Just this specific vendor NIC and the VPN software.

Is there any logging that can be collected to indicate what the software is seeing when this happens?

Re: Remote access VPN hardware/Driver compatibility

PhoneBoy — Tue, 18 Feb 2025 21:50:25 GMT

The client itself has logs that can be collected, which may provide some clues as to what is happening.
If these are Windows clients, make sure you're on the E88.62 release as earlier releases are known to have issues with Windows 11 24H2: https://support.checkpoint.com/results/sk/sk182996

Most likely, you're going to have to engage with TAC on this.
However, a LOT more details will be necessary before you can do this.