Problem with checkpoint vpn android app

[jdominguez]

I have a problem and I hope someone can help me. We have checkpoint 5600 firewalls in version R80.30. When I try to connect from the outside with the checkpoint mobile applications, the Iphone mobiles work fine but the android phones with the checkpoint vpn app seem to connect, they take ip but then it is as if they were not really connected. They can't ping, they can't https ... Does anyone know the solution?

[PhoneBoy]

We talking the Capsule VPN?
What version of client?
What version of Android?
What do you see on the gateway side when the Android tries to connect?

[jdominguez]

Hello, thank you for your help. Yes, I Am talking capsule vpn. As soon as I know the version of android app and app version I will tell you.

[the_rock]

Phoneboy is right, we need wayyyy more info. What do you see on the gateway? One phone issue, multiple? Any specific logs when this problem occurs? Capture?

[jdominguez]

j

[jdominguez]

Hello, thank you very much for your help. I think the error is from the android app. I have no problems with the iphone app. However, with the android app, it seems that it connects, receives the ip but from that moment on, nothing else can be done. The firewall logs only indicate that it has connected but then I do not see anything else. As soon as I can try it again  I will put an app and android version.

[Nicolas_Calvo]

Hello, We have the same issue.

• CheckPoint Capsule 1.600.72
• Phones Samsung with Android 11 (Kernel 4.14.113-22340597). Several models with this issue (S10, A53, xcover 4s, xcover 5, ...)
• Firewall R81 Gaiga Kernel 3.10

Screenshot from a Samsung S10. (look at "Decrypted Packets" and "Decrypted bytes"):

Screenshot from console (Although I have generated traffic, no traffic is reflected):

The same thing happens to other colleagues from other companies

Could you help us?

Thanks in advance.

[Denis_Davila]

Hi Nicolas, 

In my situation, the error is exactly the same. I can´t find any solution for this case. 

Do you have any idea?.