topic snx on linux disconnects when starting rdp session in SASE and Remote Access

snx on linux disconnects when starting rdp session

Jonathan — Tue, 17 Sep 2024 09:33:06 GMT

Hi,
We use SNX on linux based machines (Stratodesk) to connect to VPN and then start RDP session using Native Applications.
After upgrading from R81.10 on open server to R81.20 on 9100 appliances, we started experiencing strange behavior -
Starting the RDP session caused the disconnection of the SNX.
This happened only on some of the Stratodesk clients, and we couldn't find anything in common between them.
We couldn't find anything special in the logs in Smartconsole.
Anyone encountered something similar?
Thanks

Re: snx on linux disconnects when starting rdp session

Timothy_Hall — Tue, 17 Sep 2024 12:02:31 GMT

Probably JavaScript throttling, see here: sk173765: SSL Network Extender (SNX) disconnects randomly after upgrade to R81.x

Re: snx on linux disconnects when starting rdp session

Jonathan — Tue, 17 Sep 2024 16:00:58 GMT

Hi Timothy,

We actually installed JHF 76 and it didnt work.

The SK states it was fixed on JHF 26...

Re: snx on linux disconnects when starting rdp session

Lesley — Tue, 17 Sep 2024 20:05:36 GMT

Stratodesk is not listed on supported Linux system as stated here:

https://sc1.checkpoint.com/documents/SSL_Network_Extender_AdminGuide/Content/Topics-SNX-Admin-Guide/SNX-Versions-and-Requirements.htm?tocpath=_____5

They use their own Linux distro so it is not ''based'' on something else. Keep this in mind.

Second

Are you sure that the SNX software also got updated on the Linux server itself?

On GW check: cat $CVPNDIR/htdocs/SNX/CSHELL/snx_ver.txt

On client check: snx -h

It should be 80008407

Third, you could use this SK to debug client and or GW:

https://support.checkpoint.com/results/sk/sk33833

Re: snx on linux disconnects when starting rdp session

PhoneBoy — Tue, 17 Sep 2024 22:17:23 GMT

Seems to match the symptoms here: https://support.checkpoint.com/results/sk/sk181155
However, this issue should theoretically be fixed.
I would confirm it's similar errors and engage TAC.