topic Remote access vpn disconnecting frequently (every 5 seconds) in CP 80.20 firewall in SASE and Remote Access

Remote access vpn disconnecting frequently (every 5 seconds) in CP 80.20 firewall

Srihari_E — Thu, 04 Apr 2024 06:30:53 GMT

Re: Remote access vpn disconnecting frequently (every 5 seconds) in CP 80.20 firewall

_Val_ — Thu, 04 Apr 2024 08:43:57 GMT

First of all, R80.20 is out of support for a while. That said, please provide more details so people can understand the situation better.

Re: Remote access vpn disconnecting frequently (every 5 seconds) in CP 80.20 firewall

Srihari_E — Thu, 04 Apr 2024 11:30:11 GMT

Tag(s) Added: We are using 4000 appliances version R80.20, last month we changed the cisco router c1111-4p, After that remote access vpn clients are facing vpn disconnections frequently(every 2seconds). Could you please help me whether this is a router issue or firewall issue. Because we do not changed any configuration in the firewall.

Re: Remote access vpn disconnecting frequently (every 5 seconds) in CP 80.20 firewall

the_rock — Thu, 04 Apr 2024 12:26:33 GMT

Have a look at below, but again, as Val said, R80.20 is totally unsupported, even R80.40 will be this month, so please upgrade to at least R81 base.

Maybe this helps

https://community.checkpoint.com/t5/Remote-Access-VPN/VPN-Client-disconnects-after-one-hour/td-p/52093

Re: Remote access vpn disconnecting frequently (every 5 seconds) in CP 80.20 firewall

Timothy_Hall — Thu, 04 Apr 2024 12:37:39 GMT

Any NATting happening on the new Cisco router? Is there an ACL on this new router that could be blocking tunnel test traffic? Is Visitor Mode in use by your clients?

sk44075: Endpoint Connect client disconnects every 20 seconds after connecting successfully to VPN Gateway

sk121992: Remote Access client connects successfully but is disconnected after 10 minutes

sk172184: Remote Access client behind NAT disconnects after 20 seconds in Visitor Mode

sk149232: Endpoint Security VPN client gets disconnected from the VPN approximately every 20 minutes

Re: Remote access vpn disconnecting frequently (every 5 seconds) in CP 80.20 firewall

the_rock — Thu, 04 Apr 2024 12:54:06 GMT

We had exact issue with a customer about 3 years ago and after multiple TAC sessions and debugs, issue simply resolved itself...how, I have no clue, we never found out, just one day everything worked.

Andy

Re: Remote access vpn disconnecting frequently (every 5 seconds) in CP 80.20 firewall

Srihari_E — Thu, 04 Apr 2024 13:13:29 GMT

yes, we have natting and ACL rules in router. But there is no any restrictions for ipsec.

cisco 1111-4p is not supporting snmp-server enable traps ipsec and ike commands.

Re: Remote access vpn disconnecting frequently (every 5 seconds) in CP 80.20 firewall

the_rock — Thu, 04 Apr 2024 13:15:14 GMT

I dont know if debug commands on Cisco router are same as on ASA, but if you type word debug, it may give you all the options. You can also probably try run capture to see if any issues.

Andy

Re: Remote access vpn disconnecting frequently (every 5 seconds) in CP 80.20 firewall

Chris_Atkinson — Thu, 04 Apr 2024 14:32:37 GMT

4000 series appliance is EOL.

If the issue occured after swapping the router, how are the interface counters & QoS configuration?

Re: Remote access vpn disconnecting frequently (every 5 seconds) in CP 80.20 firewall

Srihari_E — Fri, 05 Apr 2024 05:10:27 GMT

All other services are working fine, site to site vpn is also working fine. only remote vpn access is not working. \

Note: Remote access vpn is connecting and disconnecting after 5 seconds.

Re: Remote access vpn disconnecting frequently (every 5 seconds) in CP 80.20 firewall

the_rock — Fri, 05 Apr 2024 10:48:14 GMT

Did you consider links Tim and myself sent?

Andy