Capsule VPN mobile users can't connect

[gilyazovamir]

Hey, everybody!

When connecting users via Capsule VPN, it fails to authenticate (Unknown user, unknown user D). Gateway 81.20 JHF 92.
The problem occurs only from mobile devices, both android and ios, on different versions of the app. At the same time from PC the same users connect successfully.
Both existing domain users and created test domain users and users created in SmartConsole cannot connect.
I don't see any obvious errors in logs and debug.

Please, give me a hint.

[Lesley]

What authentication is used? Same for Capsule VPN mobile users and PC users?

Just a wild guess: https://support.checkpoint.com/results/sk/sk88063

[gilyazovamir]

Tried both personal certs and login/pass — neither works on mobile, but they’re fine on PC.

Thanks, we’ll test this SK

[the_rock]

Have a look at what I attached, it might be relevant.

Andy

[PhoneBoy]

Make sure those clients are enabled in the relevant gateway/cluster object.
This is from Demo Mode where they clearly aren't (and I'm fairly certain this is default):

[the_rock]

Hey @gilyazovamir 

Were you able to check what we suggested?

Andy

[gilyazovamir]

Thank you for the suggestions. However, Capsule VPN is already enabled in the VPN clients section.

We'll try SK that Lesley suggested and update you on the results

[the_rock]

You can try that sk, thogh it appears it only refers to certificate auth, but you said even username/pss method fails as well.

Andy

[the_rock]

Btw, would you mind attach debugs with relevant username/IP? If possible, I would like to have a look...just blur out any sensitive data.

Andy