topic Re: Capsule VPN 'Data out of range' in SASE and Remote Access

Capsule VPN 'Data out of range'

paultwdavey — Fri, 13 Nov 2020 11:56:09 GMT

Hello All

We're starting to move towards using Capsule VPN for users to connect to VPN/our network. We are having an intermittent issue where users are getting an error message which says:

'Can't connect to VPN
The operation attempted to access data outside the valid range (Excep_FromHResult 0x8000000B)'

Has anyone had this before? And do you know what I need to look for?

Looking at the logs on the firewall, the only difference between the 2 connection attempts (the first one fails, the second one succeeds) is that the second one is assigned an office mode IP, but the first one doesn't.

Thanks
Paul

Re: Capsule VPN 'Data out of range'

PhoneBoy — Sun, 15 Nov 2020 03:54:13 GMT

What version/JHF level?

Re: Capsule VPN 'Data out of range'

paultwdavey — Mon, 16 Nov 2020 06:58:52 GMT

Hi PhoneBoy - R80.40, JHF 78

Re: Capsule VPN 'Data out of range'

paultwdavey — Tue, 24 Nov 2020 09:34:07 GMT

Hi All

Anything further on this? Or has anyone ever seen it before?

Thanks

Paul

Re: Capsule VPN 'Data out of range'

paultwdavey — Mon, 30 Nov 2020 14:46:24 GMT

As a bit of further information for this, we got some logs from the user's machine today, and it looks something like this:
User connects to VPN
VPN connects and negotiates all of the networks in the encryption domain
VPN finds all of the DNS suffixes

Then, you get an error:
Message from VPN App: [VPN Name]
Got disconnect reply, try without reusing Office mode address: disconnect

Which is then followed by the error presented to the user:
Message from VPN App: [VPN Name]
snxConnect: Deleting session on exception System.ArgumentOutOfRangeException: The operation attempted to access data outside the valid range (Excep_FromHResult 0x8000000B)
at SharedLibrary!<BaseAddress>+0x220e3b
at SharedLibrary!<BaseAddress>+0x220d8f
at SharedLibrary!<BaseAddress>+0x2447a5
at SharedLibrary!<BaseAddress>+0x2a7235
at SharedLibrary!<BaseAddress>+0x2a7218
at CheckPointVpnPluginAppBg.CCC.sendSnxHello(Networking.Vpn.VpnChannel channel, Networking.Sockets.StreamSocket socket, Networking.Vpn.VpnDomainNameAssignment& nameScope)
at CheckPointVpnPluginAppBg.CCC.sendSnxHello(Networking.Vpn.VpnChannel channel, Networking.Sockets.StreamSocket socket, Networking.Vpn.VpnDomainNameAssignment& nameScope)
at CheckPointVpnPluginAppBg.CCC.snxConnect(Networking.Vpn.VpnChannel channel, Networking.Sockets.StreamSocket socket, Networking.Vpn.VpnRouteAssignment& routeScope, Networking.Vpn.VpnDomainNameAssignment& nameScope, Networking.Vpn.VpnTrafficFilterAssignment& trafficFilterScope)

Then you get lots of messages about disconnecting from the VPN

Re: Capsule VPN 'Data out of range'

PhoneBoy — Mon, 07 Dec 2020 02:50:15 GMT

Recommend getting the TAC Involved here.

Re: Capsule VPN 'Data out of range'

David_Ulloa — Thu, 18 Nov 2021 17:20:30 GMT

Was there any solution for this? I just started having the same issue.

The operation attempted to access data outside the valid range (Excep_FromHResult 0x8000000B)

Re: Capsule VPN 'Data out of range'

paultwdavey — Mon, 22 Nov 2021 11:13:19 GMT

Hi David - We found that this was being caused by outdated network card drivers. In 99% of instances, updating them to newer drivers resolved the issue

Paul