topic Re: Capsule VPN fails to register hostname in SASE and Remote Access

Capsule VPN fails to register hostname

Marc_Cantor — Tue, 03 Aug 2021 15:01:01 GMT

We have a requirement for all vpn client devices to be managed using their hostname from the internal network whenever they are connected remotely. This works well when using the CP IPsec client but hostname registration does not work when using Capsule for Windows 10.

We configured the DNS suffixes in the 'Gateway Properties > VPN Clients > Office Mode > Optional Parameters'. We also configured the hosts Capsule adapter, Advanced TCP/Ip settings with "register this connections address with DNS". We found another post that suggested a registry entry is required for DNS registration and "Always On VPN" must be enabled.

I understand Capsule is just a plug in for Windows 10 but trying to isolate this issue as being a Windows or CP problem. Running R80.40 and the latest Windows 10 version.

Thanks

Re: Capsule VPN fails to register hostname

PhoneBoy — Thu, 05 Aug 2021 15:15:26 GMT

My inclination is this is a Windows issue.
Do you see with, say, an fw monitor, the relevant DNS packets coming from the client to register?

Re: Capsule VPN fails to register hostname

the_rock — Thu, 05 Aug 2021 17:31:01 GMT

I recall once that this was the solution...but, cant say 100% it would work for you, but worth a try. Also, IF you have ISP redundancy, make sure site is not resolving to 2nd ISP link, because if so, thats when people will have this problem, guaranteed.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137676

Re: Capsule VPN fails to register hostname

Marc_Cantor — Thu, 05 Aug 2021 20:04:51 GMT

Ran a tcpdump -s 0 -nni ethX port 67 -w dhcp.cap when connecting with the CP IPsec client, Under DHCP discover I found option 12 to include the endpoint hostname. When I ran a tcpdump with Capsule, option 12 was missing.

Would like to mention that under the advanced configuration / SecureRemote/SecureClient IKE/IPSec Settings the "om_extended_dhcp_params is selected.

I'm beginning to feel this hostname registration issue may be a limitation with Capsule for Windows 10.

Re: Capsule VPN fails to register hostname

PhoneBoy — Thu, 05 Aug 2021 22:11:29 GMT

May be worth a TAC case, but I suspect it is a limitation with Windows 10.