topic Re: Unable to print to an Epson TM-U230 printer over IP with VPN On in SASE and Remote Access

Unable to print to an Epson TM-U230 printer over IP with VPN On

jorgemsassuncao — Tue, 13 Jun 2023 16:54:26 GMT

I have a problem that is, when the customer is outside the company and has the VPN turned on, he cannot print to an Epson TM-U230 printer, which is a receipt printer and is connected to the office by IP.
When trying to PING it does not respond and access to the printer's web page does not work either.

With the rest of the network printers in the office, it is possible to PING or access the web settings page.

This situation only happens outside the company, inside it is possible to PING and communicate with the configuration page.

The existing gateway is a 1570 and the VPN configured is through Check Point VPN clients and with Check Point Clients installed.

Can someone help me?

Re: Unable to print to an Epson TM-U230 printer over IP with VPN On

PhoneBoy — Tue, 13 Jun 2023 18:37:38 GMT

Just to make certain I'm understading:

The printer is on-prem behind a 1570
The remote user is connecting via VPN
The user is unable to ping the printer or access it

Is the printer's IP address part of the Encryption Domain?
Or, if this is a locally managed 1570, can you confirm that the 1570 can reach the printer directly with ping or similar?

Re: Unable to print to an Epson TM-U230 printer over IP with VPN On

jorgemsassuncao — Wed, 14 Jun 2023 13:26:55 GMT

Hello @PhoneBoy

The printer is on-prem behind a 1570 - Yes, is behind the 1570
The remote user is connecting via VPN - Is connecting through VPN and is a AD user
The user is unable to ping the printer or access it - Yes, cannot ping or access this specific printer (ticket printer 80mm), but it has access to all other "normal" printers.

Or, if this is a locally managed 1570, can you confirm that the 1570 can reach the printer directly with ping or similar?

It's a locally manage 1570 and from the 1570 i can ping this printer with no problem.

Re: Unable to print to an Epson TM-U230 printer over IP with VPN On

PhoneBoy — Wed, 14 Jun 2023 17:03:41 GMT

Have you done any tcpdumps on the gateway when the user is attempting to ping the printer from the VPN?
Do you see any logs that the user is attempting to access this printer over the VPN?

Re: Unable to print to an Epson TM-U230 printer over IP with VPN On

jorgemsassuncao — Thu, 15 Jun 2023 09:24:15 GMT

No, from the security logs i can't see the user trying to access the printer.

Re: Unable to print to an Epson TM-U230 printer over IP with VPN On

jorgemsassuncao — Thu, 15 Jun 2023 13:10:17 GMT

Hello @PhoneBoy
My problem was a simple thing and I didn't remember to confirm.
The printer's Gateway was pointing to the domain server and not to the FW.
As soon as I changed it, users connected via VPN started communicating with the printer.
How embarrassing...