Capsule workspace authentication error after migration of SMS to R82

[mva]

Hello mates!

We faced authentication error in Capsule workspace app after migration. We tested it on several lab environments, and error scenarios is same - on R81.20 SMS everything works properly, after migration to R82 auth error with wrong credentials reason, after it we're coming back to R81.20 - everything fine again. Does it related somehow to EOL of workspace?

[Chris_Atkinson]

Was JHF T10 applied and was this with Radius for auth or another method?

Certainly the Dec 2024 EOL of Capsule Workspace is an ongoing consideration.

[mva]

Just tested with take 10 - same result. We're using only ad username + password

.

[G_W_Albrecht]

Did you open SR# with CP TAC already ?

[mva]

No, we're just testing in lab. Several of our customers are using capsule workspace, and we're trying to find solution for this problem in case if they're decide to upgrade to R82 and continue capsule usage till end of theit contracts

[kamilazat]

Hi. We have started getting the same complaints from the customers. 

Have you received any kind of solution from TAC or PS? 

[Chris_Atkinson · Accepted solution]

One solution previously suggested here was upgrading the gateway also to R82.

Refer also: https://support.checkpoint.com/results/sk/sk183252

Note Capsule Workspace is EOL.

[mva]

Hello kamilazat!

We've changed polcy settigns, from unified to legacy, and, as I remember, it helped, but it was on R82 without JHF takes

[PhoneBoy]

What is the exact error message you're seeing?
And did you upgrade the gateways to R82 also, or just the management?

[mva]

Authentication error about wrong creds. But we're successfully connecting to MAB portal. We're using only R82 managment, gw is 81.20. We've upgraded via migration

[mva]

Also we see this logs. It's strange

[PhoneBoy]

That's even stranger.
You might see if anything useful shows up in the debugs: https://support.checkpoint.com/results/sk/sk108955 

Having said that, this will probably require a TAC case to troubleshoot further.

[Peter_Thome]

We have the same isue - SMS upgraded to R82 and VPN Gateway still on R81.20

Just installed a Test GW with R82 and Mobile Access Blade only and the same Mobile Acess Policy (Unified Policy)

With this new Gateway, Capsule Workspace on R82 works fine. We will have to find a Maintenance window wo upgrade our VPN GW.