topic Re: VPN failed login on SMB1590 in Spark Firewall (SMB)

VPN failed login on SMB1590

TomislavT — Tue, 14 Jun 2022 11:58:31 GMT

Hello everyone,

If some one can help me out with this problem.
On our location we have Centrally managed SMB 1590, where we need to setup remote access for our users.

Connection to VPN goes well but when test user types in his local username and password he gets wrong username or password.
When checking logs for problems we see that failed login factor is password and reason is user unknown to FireWall-1 authentication. User is locally created and he is in VPN test group witch is participant user group for remote access.

Does anyone knows what could be the reason for this error and what can we do to fix it up ?

Thank you in advanced,

Tomislav

Re: VPN failed login on SMB1590

_Val_ — Tue, 14 Jun 2022 13:29:10 GMT

Show how you define the group and VPN community please

Re: VPN failed login on SMB1590

TomislavT — Tue, 14 Jun 2022 13:44:05 GMT

Hello Val,

Here are VPN community and group.

Re: VPN failed login on SMB1590

_Val_ — Tue, 14 Jun 2022 13:49:37 GMT

Where is the group definition? How do you set up users in the group?

Re: VPN failed login on SMB1590

TomislavT — Tue, 14 Jun 2022 13:56:25 GMT

User is made locally in Smart Console then added to VPN test group.
What do you mean by group definition ?

Re: VPN failed login on SMB1590

_Val_ — Tue, 14 Jun 2022 15:02:18 GMT

the invalid user error usually means a basic authentication issue: incorrectly defined user, group wrongly populated, etc. Your screenshots look fine so far, but you did not share user and group screenshots.

Re: VPN failed login on SMB1590

_Val_ — Tue, 14 Jun 2022 15:02:57 GMT

How do you know users can authenticate in the first place? Did you check them somewhere else?

Re: VPN failed login on SMB1590

TomislavT — Wed, 15 Jun 2022 06:34:28 GMT

I didn't check if they can authenticate somewhere else since most of that is done via LDAP.
On 6400 that we have all users and groups are connected via LDAP and checked with Identity Awareness.

This 1590 is part of new network and management server and we want to make user locally and do authentication locally or via ISE because that whole network is isolated from our LAN.

Re: VPN failed login on SMB1590

G_W_Albrecht — Wed, 15 Jun 2022 11:32:23 GMT

Contact TAC to get his resolved quickly !

Re: VPN failed login on SMB1590

_Val_ — Wed, 15 Jun 2022 11:56:39 GMT

Second that. All settings look okay, please engage with TAC to fix this.