Checkpoint Remote Access VPN - support for Windows 11 24H2 (build 26100)

[mbesen]

Hello,

I tried to install Remote Access VPN, latest available version (E88.40) on laptop running Windows 11 Enterprise 24H2, build 26100.

Build 26100 is an upcoming 24H2 release that is already available for couple of months in Insider programme, and is released for general availability for ARM computers, with imminent release to Pro and Enterprise SKUs.

So, after installing 24H2 on company laptop and setting up Remote Access VPN, said VPN connects to VPN gateway server for couple of seconds and then it disconnects. Laptop's network adapter stops working too unless I reset it via Settings app.

I know there is no official support for 24H2 yet from Checkpoint, but usually there was installation block that prevented installing Remote Access VPN on unsupported build versions. This time this didn't happen so I wanted to know is CheckPoint aware of this issue, and if needed, I can provide additional logs to help narrow down the root cause test fix, if possible.

Thank you, and kind regards,

Mario

EDIT: I couldn't find Remote Access VPN subforum, didn't notice it's under Quantum now, so if you could be kind enough to move it there I'd appreciate it!

[the_rock]

I agree 100%. I even checked jumbo 90 notes and there is nothing about snx there at all. I feel it would be totally pointless to even consider jumbo 90 in your case, as Im positive it would not do anything for this issue.

Did you check below steps?

Andy

https://support.checkpoint.com/results/sk/sk103572

[Lau]

Yepp. sk103572 completed and in the hands of the support technician.

[the_rock]

Are you okay posting debugs here? I would like to review to see if we can help further. Or message me directly with some details that may help.

Let me know.

Andy

[Lau]

If you have a lab environment you can see it for real yourself. I have been able to reproduce the issue every time by just connecting with SNX network mode on a machine running Windows 11 24H2 every time, virtual and physical. Tested lots of different java versions, all showing the the same issue. Tested on several JHFs on R81.10 and several JHFs on R81.20. A few seconds after you click connect on the portal, all network connections are lost.

I have not had the time to test R82 yet.

[the_rock]

Im trying to see if I can update my win 11 test machine behind the R81.20 jumbo 90 cluster to 24h2, as currently its on 23h2 and snx works fine. Let me see if there is manual install option, as checking for windows update does not present 24h2.

Andy

[Bruno_Ramos]

Hi all,
I have a case open with Check Point support and the R&D team is working on it.
So for, no solution for the SNX issue with Windows 11 24h2.
As soon as I have a resolution, I will post it.

Cheers

BR

[the_rock]

Let us know how it goes.

Andy

[Lau]

We have a solution!

It's a bit crude but it works. I have only tested this after first trying to connect and failing. So SNX is already installed.

Create this entry as a DWORD32 in regedit:

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cpextender\MetricSetMethod"

Set the value to 1 (hex).

Reboot the machine.

Connect and marvel at your working SNX network mode connection!

[the_rock]

Thanks for letting us know!

Andy

[spireclimber]

Updating for the sake of confirmation: This worked on my windows 11 machine as well.
May want to make a more accessible post with this fix for users to find

[PhoneBoy]

It is now, yes: https://support.checkpoint.com/results/sk/sk182923 

[the_rock]

Looks like just came out today 🙂

Andy

[kenn_checkpoint]

What is the new version? Latest I can find is 88.60 - can someone provide a link for new version which supports 24H2?

thnks in advance 

[PhoneBoy]

The latest version for Windows is still E88.60 and it supports Win 11 24H2 albeit with the necessity to apply a fix either on the gateway side or on the client side.
E88.70 is expected to resolve this, which is taking a bit longer than planned to get released.

[kenn_checkpoint]

ahh ok. What is the fix to use on the client side? The reg edit that Lau posted?

[PhoneBoy]

The registry edit is for the SNX client specifically.
For Endpoint Security VPN/Check Point Mobile, you need to edit trac.defaults and restart the VPN client as described in: https://support.checkpoint.com/results/sk/sk182749 

[Bruno_Ramos]

Hi fellows,
have you seen this:
https://support.checkpoint.com/results/sk/sk182923

I tested with some success. We had to disable/enable the network interface after connectiong through SNX.

Cheers

BR