Mobile Access - Endpoint Security VPN stops working with more than one gateway on community

carlosmfg — Tue, 22 Mar 2022 16:37:09 GMT

Hello!

I have 2 gateways the are configured for VPN clients and both have the same vpn domain.

When I add the second gateway to mobile access community clients are unable to reach the network when using Endpoint Security vpn but works fine with ssl extender.

The client recieves all routes .

We are using unified rules.

Anyone else had similar problem?

Re: Mobile Access - Endpoint Security VPN stops working with more than one gateway on community

Ruan_Kotze — Wed, 23 Mar 2022 07:05:09 GMT

Pretty sure this is MEP related. 1st thing I would do is double check which gateway my clients are connecting to - 1st or 2nd? With MEP, depending on the configuration, even though the client connection says GW A, it might in actual fact be connecting via GW B. Once you determined that start with normal traffic troubleshooting steps.

I've for example have had instances where the network behind the gateways was pushing all office mode return traffic to GW A, even if clients were connecting to GW B.

If you want to retain the ability for the clients to manually decide which gateway they connect to - it's discussed in this thread

Then there's also a thread which I started which discuss a couple of options around MEP. I'm still firmly of the opinion that the MEP configuration process can be made smoother and clearer😁

topic Mobile Access - Endpoint Security VPN stops working with more than one gateway on community in SASE and Remote Access

Mobile Access - Endpoint Security VPN stops working with more than one gateway on community

Re: Mobile Access - Endpoint Security VPN stops working with more than one gateway on community