topic Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT in Spark Firewall (SMB)

GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

AfterMath — Fri, 24 Sep 2021 10:21:21 GMT

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

_Val_ — Fri, 24 Sep 2021 11:43:01 GMT

Instead of posting pictures, please explain what kind of site you are trying to setup, and what is the actual use case. What are you using on GW side and on client side?

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

AfterMath — Fri, 24 Sep 2021 12:10:51 GMT

OFFICE1 (GW SIDE)

OFFICE2 (CLIENT SIDE)

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

_Val_ — Fri, 24 Sep 2021 12:19:46 GMT

I repeat the question: what are you using on the GW and client side? Appliance type, software version, same for the client.

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

AfterMath — Fri, 24 Sep 2021 12:37:03 GMT

First, thanks for your patience #Val

Office 1 (GW SIDE)

Check Point 730 Appliance (Locally Managed)
Version: R77.20.51

Office2 (Client side)

Endpoint Security VPN E84.50 and i tried also old version

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

the_rock — Fri, 24 Sep 2021 12:48:16 GMT

Im not good with embedded gaia by any means, but I know @G_W_Albrecht definitely is, so maybe he can give you some pointers, I will say though, based on your very first screenshot, it says site does not support use of this client. Have you tried using different vpn client version? I can tell you that most of the time with regular firewalls when you see similar errors, it usually has to do with visitor mode not being enabled, but not sure if thats applicable to your scenario.

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

AfterMath — Fri, 24 Sep 2021 12:56:56 GMT

Thanks #The_rock

Yes, i tried different version, even this very old

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

the_rock — Fri, 24 Sep 2021 12:57:52 GMT

Message me directly, lets do quick remote session if you have time.

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

_Val_ — Fri, 24 Sep 2021 14:04:25 GMT

Mobile client means SSL VPN, you may want to un-check this option and try again. Also, it would make sense to upgrade to the latest firmware: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=overview&product=460

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

PhoneBoy — Fri, 24 Sep 2021 22:04:26 GMT

This SK suggests a license issue: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk115743&partition=Basic&product=Endpoint
However, I'm pretty sure the 700 series has the necessary license embedded in it (or should).
What is the output of cplic print from the appliance?

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

G_W_Albrecht — Sat, 25 Sep 2021 13:03:22 GMT

Compliance Blade ? My StandAlone client does not have this blade. Sure you downloaded that client:

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

PhoneBoy — Sat, 25 Sep 2021 20:37:09 GMT

Did you install your VPN client as Endpoint Security @AfterMath ?
That might explain this message.
Recommend installing as Check Point Mobile which should be covered by the license in your appliance.

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

AfterMath — Sun, 26 Sep 2021 08:50:56 GMT

I tried the two ways, still dont working..

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

AfterMath — Sun, 26 Sep 2021 09:03:09 GMT

No link to dowload...

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

PhoneBoy — Sun, 26 Sep 2021 15:12:38 GMT

Can you please provide the output of cplic print?
Otherwise all I can suggest is a TAC case.

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

AfterMath — Sun, 26 Sep 2021 17:02:38 GMT

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

Tom_Hinoue — Mon, 27 Sep 2021 00:58:24 GMT

Maybe you have a NAT rule on CP730 forwarding port 443 to your internal servers? (wondering from your other post where it is detecting a hotspot)

If you do, you will need to configure in advanced settings to reserve port 443 for port forwarding, and assign a different port for Remote Access.

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

PhoneBoy — Mon, 27 Sep 2021 04:05:39 GMT

This doesn't tell me what I'm looking for.
The output of a CLI command will give me more precise details that aren't reflected in this screenshot.

And the point about usage of port 443 for a server/port forwarding is also something to check for as well.

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

G_W_Albrecht — Mon, 27 Sep 2021 08:06:48 GMT

Never seen that - i wonder how you have been able to download the other versions, but you better ask TAC for the client...

Re: GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

AfterMath — Mon, 27 Sep 2021 10:59:14 GMT