VPN issue after installing New Primary FW in the cluster

EthHack0101 — Thu, 09 Dec 2021 22:22:20 GMT

Hello,

We recently had to RMA a new gateway (5600) into our cluster.

The new FW is working except for authenticating our Remote access workers.

We use a RADIUS server through RSA.

The remote access users are able to authenticate through the Endpoint Checkpoint Security with their 2FA RSA tokens just fine when the traffic is running through our secondary gateway in the cluster. However, when failing to the primary, users are getting an authentication error.

Hopefully someone can point me in the right direction.

Thanks,

Jack

Re: VPN issue after installing New Primary FW in the cluster

Markus_Genser — Fri, 10 Dec 2021 09:03:38 GMT

Hello Jack,

I would suggest you check the license on the gateway and usercenter.

It happens that not all features are correctly transferred in a RMA and you're hitting an licensing issue.

The second thing that comes to mind would be to compare both gaia config and kernel parameter if there's something missing or file configurations in general for RSA.

BR,

Markus

topic Re: VPN issue after installing New Primary FW in the cluster in SASE and Remote Access

VPN issue after installing New Primary FW in the cluster

Re: VPN issue after installing New Primary FW in the cluster