Hello!
Until today, Checkpoint Endpoint Security VPN worked without issues. Today, the VPN Client stopped working.
- The VPN simply displays "No security policy is configured." as shown in the attached screenshot.
- My VPN profile isnt present anymore, and the client won't allow me to add new profiles. The wizard won't let me click next after entering the IP address of the gateway.
Further investigation:
- The windows service "Check Point Endpoint Security VPN" keeps terminating and restarting. I have a couple thousand error messages in Windows Event Viewer with the following text: "The Check Point Endpoint Security VPN service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service."
- I have found the following fragment in trac.log:
... more messages that indicate normal startup (?)
[ 28300 29032][18 Nov 18:29:23][TR_CL2SRV_X] TR_CL2SRV_X::RegisterCb: Registered cb b96e10 for message 1019
[ 28300 29032][18 Nov 18:29:23][TR_CL2SRV_X] TR_CL2SRV_X::RegisterCb: Registered cb bf16c0 for message 1016
[ 28300 29032][18 Nov 18:29:23][TR_CL2SRV_X] TR_CL2SRV_X::RegisterCb: Registered cb befa70 for message 1017
[ 28300 29032][18 Nov 18:29:23][TR_CL2SRV_X] TR_CL2SRV_X::RegisterCb: Registered cb bda450 for message 1020
[ 28300 29032][18 Nov 18:29:23][TR_CL2SRV_X] TR_CL2SRV_X::RegisterCb: Registered cb b75fd0 for message 0
[ 28300 29032][18 Nov 18:29:23][TR_CL2SRV_X] TR_CL2SRV_X::RegisterCb: Registered cb b754c0 for message 1
[ 28300 29032][18 Nov 18:29:23][TrComInf] TrComInf::TrComInfInit: __start__ 18:29:23.384
[ 28300 29032][18 Nov 18:29:23][TrComInf] TrComInf::TrComInf::TrComInfInit: enter...
[ 28300 29032][18 Nov 18:29:23][messaging] messaging::add_msg: added a new cb: msg - 1
[ 28300 29032][18 Nov 18:29:23][messaging] messaging::add_msg: added a new cb: msg - 2
[ 28300 29032][18 Nov 18:29:23][tcpserver] TcpMultiPipe::socket_init: Created m_serverfd: 0x338 socket
[ 28300 29032][18 Nov 18:29:23][tcpserver] TcpMultiPipe::socket_init: setsockopt - ok!
[ 28300 29032][18 Nov 18:29:23][tcpserver] TcpMultiPipe::socket_init: ioctlsocket - ok!
[ 28300 29032][18 Nov 18:29:23][tcpserver] TcpMultiPipe::socket_init: [SEVERE]: Failed to bind to socket: Unknown Winsock error (10013)
[ 28300 29032][18 Nov 18:29:23][tcpserver] TcpMultiPipe::pipe_if_server_init: [SEVERE]: Failed to initialize SOCKET
[ 28300 29032][18 Nov 18:29:23][messaging] messaging::init: Failed to initialize pipe
[ 28300 29032][18 Nov 18:29:23][TrComInf] TrComInf::TrComInf::TrComInfInit: Failed to init messaging
[ 28300 29032][18 Nov 18:29:23][TrComInf] TrComInf::TrComInfInit: __end__ 18:29:23.384. Total time - 0 milliseconds
[ 28300 29032][18 Nov 18:29:23][TR_OVERSITE] TR_OVERSITE::Create: Destroying TrOversite ...
[ 28300 29032][18 Nov 18:29:23][TR_FIREWALL] UploadLogsComponent::Inst: create UploadLogsComponent instance
[ 28300 29032][18 Nov 18:29:23][TR_FIREWALL] UploadLogsComponent::FlushBufferToFile: entering
[ 28300 29032][18 Nov 18:29:23][TR_FIREWALL] UploadLogsComponent::FlushBufferToFile: m_logConf is NULL
[ 28300 29032][18 Nov 18:29:23][CONFIG_MANAGER] ConfigurationManager::destroy: __start__ 18:29:23.384
[ 28300 29032][18 Nov 18:29:23][CONFIG_MANAGER] ConfigurationManager::destroy: delete mInst
[ 28300 29032][18 Nov 18:29:23][CONFIG_MANAGER] ConfigurationManager::~ConfigurationManager: __start__ 18:29:23.384
[ 28300 29032][18 Nov 18:29:23][CONFIG_MANAGER] ConfigurationManager::saveToFile()
[ 28300 29032][18 Nov 18:29:23][XmlWrapper] XmlDocument::XmlDocument: inside
[ 28300 29032][18 Nov 18:29:23][XmlWrapper] XmlDocument::SaveString: inside
[ 28300 29032][18 Nov 18:29:23][CONFIG_MANAGER] ConfigurationManager::saveToFile(): got xml:
<CONFIGURATION></CONFIGURATION>
[ 28300 29032][18 Nov 18:29:23][CONFIG_MANAGER] OBSCURE_FILE return value 1, because it is Default variable. Scope: site NULL, gw NULL ,user USER
[ 28300 29032][18 Nov 18:29:23][CONFIG_MANAGER] Updated trac.conf.bak
[ 28300 29032][18 Nov 18:29:23][CONFIG_MANAGER] Updated trac.conf
... more messages indicating service shutdown
The message "[SEVERE]: Failed to bind to socket: Unknown Winsock error (10013)" is the only error I can find in that file. I have truncated the file, since I am not sure what messages in this log contain sensitive data. If the full log is needed, that can be arranged.
What does it mean? What can I do to fix this issue?
Thank you and best regards,
Jonas
---
OS: Windows 11 23H2
Version: VPN E86.80 Build 986104309
Exact version/JHF take level of gateway: I don't know what that is. I think it might not be relevant to the issue.
