Endpoint client - Confusing input prompts

[Howard_Gyton]

Since, we believe at least, implementing multiple authentication methods while we test two factor authentication for VPN, our Endpoint clients are getting confusing labels on the client.  For example:

The client has accepted the Username, and now the user must enter their password, but the password box has the label "Username" next to it.

We have it configured on the firewalls like this:

I have no idea why they got swapped around like that.  Does anyone have an idea on how to swap these back?

The firewalls are running R81.10.

[the_rock]

Cant say I had ever seen that before. One thing I would try is have someone randomly delete/re-create the site and see if same issue happens. If it does, would open TAC case. If not, maybe have a look through guidbedit to see if there are any related settings for this.

[Howard_Gyton]

It works like that for every fresh install, and after removing, and re-creating the site.  It's nothing more than a GUI issue, as the VPN works, but it has generated some tickets from people confused by it.

I'll log a ticket with our support partner.

[the_rock]

Let us know what TAC says. I will check this more in the lab as well.

[the_rock]

@Howard_Gyton 

Apologies, did not get a chance to check this today, but will have a look tomorrow and update you.

[Howard_Gyton]

I haven't had a chance to log this with my support partner yet.  I have some images to include in the ticket.  I have noticed a slight variation, which may be down to which version of Endpoint have you have installed.

E89.10 gives you a "Response:" label to the left of the password box.  Most of the older clients we have, mostly 88.70, and a few 88.30 show "username:" next to the password box.  In both instances, above that is a "password:" label, but again the case sensitivity is wrong as our configuration has "Password:".

I'll get the ticket logged on Monday I expect, when I am back in the office.

The "response" part got me thinking.  We also made some changes to allow for 2 factor authentication, backing of to our Azure/Entra tenancy.  That required some database changes to our firewall.  We have a second authentication, non "Standard", method for that.  If you are seeing the same thing, then perhaps that is not the cause, unless you also have a similar configuration?

[the_rock]

Good day Howard,

Just did some more checks on my end and looks exactly what you have and I always get below, even after I delete/re-create the site in the lab. Hopefully TAC can figure out why it happens.

 

[Howard_Gyton]

I had a look at both an E89.10, and E88.70 client on Windows. Both of these show "Response:", and not "Username" when asking for the password.

 I would argue that the section highlighted with the red box is a GUI bug, one that only occurs if you untick this box so that it onl asks for your password once you have supplied the username:

If that is unticked, the initial screen, which does match our config on the server, will not accept the password there.  You enter your username, press 'Connect', and then it asks your for your password, or rathe "Response":

Our support partner states that they see the same thing as us when they have that box unticked, and the password prompt reads "Response", but I would argue that just means we are all seeing the same GUI bug, and it shouldn't be like that.  Why have the floating "password:" label above, that references nothing?  At the very least it looks messy.

[the_rock]

I agree with that, yes.

[the_rock]

Let me check what that looks like in my lab.

[the_rock]

Hey Howard,

Below is what my lab looks like and it always comes up fine.

 

[Howard_Gyton]

It looks like you don't have any alternative authentication methods configured.  We unticked that top box, and moved our configuration below:

 If you click on Settings, at the top left, you will see similar options to what we have, where you can opt to ask for the password or not on that first screen:

If you untick that box, the "Password Label" option disappears:

 

 That "Username" label is what we were seeing on the password screen, with that box unticked, but it still has that floating "password:" above.  I wonder if the Endpoint clients can't cope with this configuration for some reason?

[the_rock]

Yep, just tested it, got the same thing. Not sure if thats gui bug or by design.

[the_rock]

@Howard_Gyton Might be worth check with TAC.