topic Re: Mac OS Sequoia Beta 1 - Negotiation with site failed in SASE and Remote Access

Mac OS Sequoia Beta 1 - Negotiation with site failed

macuser79 — Tue, 11 Jun 2024 19:19:19 GMT

Hi everyone,
for work needs I installed Sequoia, the Mac operating system that was released yesterday, on my Macbook Air M1.
Yes, I know it shouldn't be done but developing in the mobile sector, I am forced to always be updated with Apple systems.
I therefore needed to install the VPN client to develop with the test environment, but unfortunately every time I try to connect I always receive the "Client" message.
Below I show you my configuration, maybe it can be useful to someone.

OS version: Mac OS Sequoia Beta 1
Version of Remote Access client: E88.30

Authentication to the VPN occurs in the following way: "Multi-Factor Authentication"

The problem is the following: "Negotiation with site failed"

I start the VPN client, it shows me my company screen to enter the username and password. After correctly entering the credentials, I receive the "Welcome Authenticated By your Identity Provider" screen and then the Safari browser does not close automatically, leaving me with the open screen. Then after a few minutes I receive the error message "Negotiation with site failed".
I would like to be able to change browsers, for example Chrome, but I don't know if that solves the problem.
What can I do ?
Thank you,
Vincenzo

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

PhoneBoy — Fri, 14 Jun 2024 23:38:41 GMT

MacOS Sequoia is currently unsupported.
I assume we'll support it in an upcoming release.

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

the_rock — Sat, 15 Jun 2024 00:00:19 GMT

If Phoneboy says its unsupported, then thats the answer 🙂

Andy

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

macuser79 — Mon, 17 Jun 2024 06:50:45 GMT

I had no doubt that there could be problems, although in reality with the first Beta version of Sonoma, the VPN client worked without problems.
I don't know if there is a Beta Testing program for this type of App, I would be happy to participate if it were possible.
Thank you,
Vincenzo

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

macuser79 — Mon, 17 Jun 2024 06:50:58 GMT

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

macuser79 — Tue, 18 Jun 2024 10:04:19 GMT

I solved the problem

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

macuser79 — Tue, 18 Jun 2024 10:05:49 GMT

I solved the problem.
Having a Mac with an ARM M1 processor, I installed the iPad version from the Apple Store and after having correctly configured it with my company's settings, I can access the VPN without problems.
Thank you all for the support

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

the_rock — Tue, 18 Jun 2024 10:07:11 GMT

Excellent job!

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

PhoneBoy — Tue, 18 Jun 2024 14:23:46 GMT

The client on the iPad is different from what you would natively install on the Mac (Check Point Mobile versus Endpoint Security VPN).
As different client types can be allowed/disallowed on the remote end, it may or may not work in all situations.

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

macuser79 — Tue, 18 Jun 2024 14:39:15 GMT

Yes, you're right, it's completely different but, while waiting for a new version of the client to be released, I use this system.

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

the_rock — Tue, 18 Jun 2024 14:42:34 GMT

I had done it many times before on my personal macbook air and it was always fine. But, Phoneboy is 100% correct, IF there is an issue, TAC most likely would not help you if it states its not supported.

As long as you are aware, then no argument 🙂

Andy

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

PhoneBoy — Tue, 18 Jun 2024 15:11:58 GMT

I was speaking to the fact that specific client types can be enabled/disabled in the Remote Access configuration.
TAC support is a separate issue. 🙂

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

the_rock — Tue, 18 Jun 2024 15:13:14 GMT

Understood 🙂

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

macuser79 — Tue, 18 Jun 2024 15:25:23 GMT

We are all aware that it may not work...but as I have already indicated before, while waiting for the native Mac client to work correctly on Sequoia too, I use this mode to be able to connect to the VPN.
I'm not having any discussion, you're having the discussion.
I wanted to give my contribution but unfortunately I can't not use Mac Sequoia, because I need it for my apps, which use IOS as the operating system and be operational immediately when IOS 18 comes out

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

the_rock — Tue, 18 Jun 2024 15:31:14 GMT

Duscussions are healthy mate 😉

No, thats fair, I agree with the choice you made, I would have done the same.

Andy

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

gunnak — Wed, 21 Aug 2024 06:39:49 GMT

How did you solve it?

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

nico81 — Tue, 17 Sep 2024 07:33:39 GMT

Still having this issue with client version 88.60 and final version of macOS Sequoia 15.0.
Please I need the client functioning, otherwise I need to rollback to Sonoma 14.x.

I also have a Mac with M chip but iPad version of Checkpoint Capsule is not supported for my connection.

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

_Val_ — Tue, 17 Sep 2024 11:46:24 GMT

Sequoia is no supported yet.

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

the_rock — Tue, 17 Sep 2024 12:04:15 GMT

Definitely not supported mate. Check out below sk, no mention of it anywhere.

Andy

https://support.checkpoint.com/results/sk/sk115192

Re: Mac OS Sequoia Beta 1 - Negotiation with site failed

vsaldanya — Tue, 17 Sep 2024 14:00:45 GMT

I've a real workaround for official Sequoia release:

I've got the solution for the latest oficial Sequoia version, changing the system default browser from Safari to another (Chrome, f.e...) on this way it works for me the 8.60 version.