SuperNode Client with Threat Emulation Status Connection error

[PJ_WONG]

Hi Checkmates,

As this is a new feature in E88.60.0087 (EPS-57370 in sk182468), I would like to check if anyone has experienced this.

SK182468: https://support.checkpoint.com/results/sk/sk182468

In current environment, we are utilising endpoint superNode & superNode Client so that the "semi-isolated" superNode Client that has no internet access is able to use superNode, as a proxy to connect Endpoint Cloud Server.

Everything is working good (deployment, update, logs) except the following errors at the assets:

- Threat Emulation Status showing error "Connection Error"
- Threat Emulation Reputation Status showing error "Service is not available"
- Attached the screenshot as reference

As I am able to replicate this at my lab environment, so I do not think it is caused by connections drop.

We have involved CP R&D into this but so far there is no breakthrough on the issue. 

If anyone has tried this feature, I really appreciate if you can advise on this.


Thank you.

[PhoneBoy]

Can you send me the SR in a PM?

[lluner]

hi ,

Could test connectivity using C:\Program Files (x86)\CheckPoint\Endpoint Security\Endpoint Common\bin\CheckConnectivity.exe

[lluner]

hi  PJ_wong 

I could use the push operation to repair this customer 

[PJ_WONG]

Hi lluner,

Unfortunately, "repair client" is not fixing it.

Attached the screenshots for client UI and test connectivity.

Aside from that, TAC has asked to turn on the proxy settings, which I think sometimes "silenced" the error for a while before it came back. This is not consistent and I am still trying to figure out the behaviour.

Thank you.

[PhoneBoy]

The TAC case you PMed me seemed to suggest something with TLS versions used might be an issue.