topic Ikev2 support for RA vpn clients in R82 in SASE and Remote Access

Ikev2 support for RA vpn clients in R82

the_rock — Tue, 29 Oct 2024 15:13:03 GMT

Hey guys,

I really hope someone can clarify this for me, because logically, its not clear at all, to me, anyway. So, below sk states following:

https://support.checkpoint.com/results/sk/sk166415

Currently, Security Gateway does not support for IKEv2 connections from Remote Access VPN Clients.

Implementing IKEv2 support is on our roadmap.

It is expected to be available in the R82 release.

Well, R82 is now officially GA, yet, we see this in smart console global properties. Im not sure I understand what word some means in this context...are we talking certain version of vpn clients? if so, which ones?

Thanks as always!

Andy

Re: Ikev2 support for RA vpn clients in R82

Chris_Atkinson — Tue, 29 Oct 2024 15:29:59 GMT

Ultimately yes whilst support is for E88.40 and higher, it also appears that some client versions are impacted by the following limitation e.g E87.60 / E87.62

ESVPN-4235 Connection to R82 Security Gateway may fail if IKEv2 protocol is enabled on that Security Gateway.

Re: Ikev2 support for RA vpn clients in R82

HeikoAnkenbrand — Tue, 29 Oct 2024 15:59:02 GMT

The info can be found in the following sk181127.

CUT>>>
- What's New in R82
- Remote Access VPN

Security Gateway now supports the IKEv2 protocol for connections from Remote Access VPN Clients (E88.40 and higher).

<<<CUT

Re: Ikev2 support for RA vpn clients in R82

the_rock — Tue, 29 Oct 2024 16:04:56 GMT

Thanks Chris!

Andy

Re: Ikev2 support for RA vpn clients in R82

the_rock — Tue, 29 Oct 2024 16:05:19 GMT

Thanks a lot, appreciate it!

Andy

Re: Ikev2 support for RA vpn clients in R82

THX1138UK — Tue, 05 Nov 2024 15:42:32 GMT

IKEv2 still doesn't work for Windows VPN Clients ☹.

I am using R82 (Release Version) in my Home Lab:

SK166415 Updated on 31st October 2024:

R82 – Global Properties:

If Prefer IKEv2, support IKEv1 is selected, then the Windows Client only uses IKEv1.

CheckPoint VPN Client for Windows E88.60 – Installed on Windows 11 Pro v24H2:

CheckPoint VPN Client for Windows E88.60 – Latest available (CheckPoint Mobile Mode):

In addition to E88.60, I also tested E88.40. There is nothing in any release notes that mentions support for IKEv2.

The only VPN client that I have tested that will successfully negotiate IKEv2 with the Security Gateway is Capsule Connect for iOS.
(I don’t have an Apple Mac or Android device available for testing).