topic Re: What remote access client version to 600 series in Spark Firewall (SMB)

What remote access client version to 600 series

Art_DeKneef — Tue, 15 Nov 2022 23:20:14 GMT

Trying to learn about setting up VOIP for clients. Since I had a 600 series laying around I thought I would try using that to start. So I set it up and see what I needed to learn. I know it's old but it's available while I try this out.

This is on a test network so I don't mess up the production network. VOIP provider is Allstream.

Issue is when I try to remote access into it using the IP addressx.x.x.x:4434 I get the response "The site does not support the use of this client". Remote Access Client is R86.60 on a Windows 10 Pro v22H2 laptop. What client do I need to use that will work? I'm downloading R81.40 to see if that will work.

Thanks.

Re: What remote access client version to 600 series

the_rock — Tue, 15 Nov 2022 23:32:42 GMT

I could not find a specific document as far as what is max version client for specific firewall, but 600 is older model, so I doubt anything E86.xx or even E84.xx may work, but give it a go. Maybe call TAC to verify if there is this info available.

Re: What remote access client version to 600 series

Art_DeKneef — Tue, 15 Nov 2022 23:36:38 GMT

I tried R81.40 and get the same message. Looking for older client now.

Re: What remote access client version to 600 series

the_rock — Tue, 15 Nov 2022 23:51:35 GMT

Shoot...but I guess it makes sense, since that model cant run any version of software older than R77.20.xx I believe.

Re: What remote access client version to 600 series

PhoneBoy — Wed, 16 Nov 2022 01:23:28 GMT

You should be able to use E86.60.
Port 4434 is used for the WebUI and cannot be used for Remote Access.
Only port 443 is supported for Remote Access.

Re: What remote access client version to 600 series

Art_DeKneef — Wed, 16 Nov 2022 01:42:29 GMT

I would have hoped R86.60 would work. But so far it doesn't. I can connect to other 700 series and 1530 devices without issue. So far every remote access client I have tried has failed to connect.

Re: What remote access client version to 600 series

Chris_Atkinson — Wed, 16 Nov 2022 03:55:40 GMT

What version is the Gateway installed with and which license is used?

If I recall a valid license has an entitlement for between 5-20 Mobile Access depending on the specific 600 model used.

Re: What remote access client version to 600 series

the_rock — Wed, 16 Nov 2022 02:34:10 GMT

Its possible then based on what phoneboy said that maybe something with config on 600 appliance is wrong. I assumed since its older model that maybe newer VPN clients dont work. I missed the part in your post about the port number, you would connect via VPN on port 443, NOT 4434, thats for web GUI as @PhoneBoy indicated.

Re: What remote access client version to 600 series

Art_DeKneef — Wed, 16 Nov 2022 02:47:27 GMT

The current firmware is R77.20.80 (990172392) and there is no license on it. It was on the shelf collecting dust when I thought I could use it to get some experience with VOIP through Check Point firewalls. I wasn't expecting to have this issue at all as it was working fine when it was replaced.

Re: What remote access client version to 600 series

Art_DeKneef — Wed, 16 Nov 2022 02:54:23 GMT

I'll check the settings again one more time but I have been over them three times already. As far as I can tell everything is correct. I started with a reset to the device, did initial configuration and verified Internet access. Then configured remote access user and then tried to connect.

I will say in my attempts, one time it did show the accept the certificate page but then ended with does not support this client. Every other time I get the site is not responding.

Re: What remote access client version to 600 series

the_rock — Wed, 16 Nov 2022 02:59:42 GMT

Ok...just to be 100% sure, you are connecting to vpn site on port 443 and NOT 4434, correct?

Re: What remote access client version to 600 series

Art_DeKneef — Wed, 16 Nov 2022 15:42:44 GMT

Yes. I have tried the IP address with and without 443. I'll look at it more later when I get back from visiting clients.