topic Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94 in SASE and Remote Access

SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

E_Islas — Mon, 08 May 2023 14:09:31 GMT

Good morning everyone.

We are in R81.10 with a cluster XL. The SMS is a VM on ESX.

Last Thursday, we installed the Jumbo Hotfix Accumulator Recommended Jumbo Take 94 to solve an issue with Identity Awareness.

The issue was fixed, but after doing that, our remote users can't connect through sslvpn. All other remote access methods work fine, however we have many clients using sslvpn who are unable to access. The connection process stays on the Connecting phase after enter the username and password.

Any advice will be appreciated.

Thanks.

Elfego

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

the_rock — Mon, 08 May 2023 14:26:50 GMT

Do you see any relevant logs in smart console? Have you tried doing zdebug for client external IP for example?

Andy

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

PhoneBoy — Mon, 08 May 2023 18:02:37 GMT

You've opened a TAC case on this, I presume?
https://help.checkpoint.com

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

E_Islas — Mon, 08 May 2023 18:31:50 GMT

In Smartconsole I don't see any error. About the zdebug, I will be posting the results in a moment.

Thanks Andy for the suggestion.

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

the_rock — Mon, 08 May 2023 18:33:41 GMT

What I meant was this, just to clarify. Say external client IP is 20.30.40.50, just run fw ctl zdebug + drop | grep 20.30.40.50 when they are trying to connect

Andy

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

E_Islas — Mon, 08 May 2023 18:37:24 GMT

Yes, I already asked the client to involve the TAC.

Thanks for yor answer.

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

Alex- — Fri, 12 May 2023 11:42:17 GMT

Same issue when upgrading a customer's cluster from R81.10 T87 to T94, no reaction from the portal after logging in.

No time to troubleshoot unfortunately as the service had to be restored quickly, uninstalling to T87 and the portal works.

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

the_rock — Fri, 12 May 2023 12:18:01 GMT

I did test for this in my lab and here are the results:

-upgrade to jumbo 94 from take 87 caused the issue

-after installing jumbo 95, though not officially recommended yet, all worked again

Andy

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

G_W_Albrecht — Fri, 12 May 2023 12:27:14 GMT

Would be fine if this was reported to CP 😉

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

the_rock — Fri, 12 May 2023 12:28:42 GMT

Im sure they can see it here and replicate it themselves, its not that hard lol

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

Alex- — Fri, 12 May 2023 12:30:54 GMT

Thanks for checking @the_rock , I will try again when Take 95 or above becomes recommended.

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

the_rock — Fri, 12 May 2023 12:32:51 GMT

No worries, probably better to wait until its recommended, specially since its production.

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

E_Islas — Fri, 12 May 2023 14:53:03 GMT

Thank you, Andy, for your research and suggestions. Since I don't have direct access to the SMS, I'm going to let the customer know what the situation is, and depending on the urgency, they can decide whether to install it or wait until it is officially recommended.

Again, thank you very much.

Elfego

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

the_rock — Fri, 12 May 2023 14:56:46 GMT

Sure, any time, glad it was helpful.

Have a nice weekend!

Andy

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

G_W_Albrecht — Fri, 12 May 2023 19:25:31 GMT

They will not see it here, i am sure - without drawing attention... But as TAC is already involved the customer can share the solution and CheckMates Link !

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

the_rock — Fri, 12 May 2023 19:32:34 GMT

Agree with that Guenther...since there is case already opened for it, @E_Islas would let them know all the findings from this post.

Have a nice weekend.

Andy

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

Blason_R — Sat, 13 May 2023 07:30:19 GMT

Thats nice to know that - I was going with Take 94 in few days.

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

genisis__ — Sat, 13 May 2023 07:52:37 GMT

I suspect Take 95 is going to be GA very soon now as it's been a month today since it was released.

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

the_rock — Sat, 13 May 2023 12:27:26 GMT

I would wait till 95 is recommended take.

Re: SSLVPN not connecting after installing Jumbo Hot Fix Accumulator Take 94

the_rock — Sat, 13 May 2023 12:27:39 GMT

I think so.