topic RDP timeout when connecting to the VPN via SSL Network Extender Application Mode. in SASE and Remote Access

RDP timeout when connecting to the VPN via SSL Network Extender Application Mode.

danieldcs83 — Thu, 27 Jun 2024 14:26:01 GMT

Hello everybody,

Our client uses a VPN where many users need to use it in SSL Network Extender Application Mode to use RDP to their hosts in the office, last week we carried out a take 150 update to correct the problem of the latest CVE disclosed. After this update, several problems were reported to us with the RDP connection in this Application Mode, users end up being unable to access their host presenting a timeout message. In the logs the access is given as accepted, performing a tcpdump it is seen that the traffic does not reach the host. A ticket has been opened to the TAC and they are analyzing the case.

I would like to know if anyone in the community has experienced a similar problem and or has any suggestions. I thank the attention.

Re: RDP timeout when connecting to the VPN via SSL Network Extender Application Mode.

Chris_Atkinson — Thu, 27 Jun 2024 15:26:31 GMT

Out of interest what was the previous JHF level and did you apply the workaround from sk181805 at all?

Re: RDP timeout when connecting to the VPN via SSL Network Extender Application Mode.

PhoneBoy — Thu, 27 Jun 2024 16:56:16 GMT

Likely it's related to: https://support.checkpoint.com/results/sk/sk181805

Re: RDP timeout when connecting to the VPN via SSL Network Extender Application Mode.

danieldcs83 — Thu, 27 Jun 2024 18:16:03 GMT

Hi,

Thanks for the answer, during our first troubleshoot we made the adjustments mentioned in sk181805, and we still continued with this problem.

Re: RDP timeout when connecting to the VPN via SSL Network Extender Application Mode.

Lesley — Thu, 27 Jun 2024 20:37:26 GMT

Can you check if the version on the gateway reflects what is installed on the client? Some settings on gw can prevent from user getting latest package. With a Jumbo you get a new SNX version. Sometimes i helps to reinstall the snx client if it is running correct version.

cat $CVPNDIR/htdocs/SNX/CSHELL/snx_ver.txt

To check the version of SNX installed on the endpoint computer:

Operating System	How to Check SNX Version
Windows	Open this file: %Program Files (x86)%\CheckPoint\SSL Network Extender\ver.ini

Please note the latest version is 80008409 and comes from R81.10 ongoing take 152 (released today).

In R81.10 take 150 i suspect version 80008407

Also what phoneboy posted:

SSL Network Extender (SNX) may encounter connectivity issues after installing Jumbo Hotfix Accumulator.

Starting Take 128

Solved in: take 152