Connection breaks after update

[certifiedit]

Good day, 

After bringing up a active passive cluster of two checkpoint 6000 to version r81.20 take 98, coming from take 92 we face several issues regarding VPN connections -  not every session initiation is successful and furthermore the connection breaks way earlier than the configured 15hours. 

Configured is the session Initiation by radius, windows based and MFA with the azure extension to the radius server. This works actually fine. But somewhere in the chain of session Initiation and keeping it alive there has to be a change coming from take 92, going to t98.

The vpn client is endpoint security VPN e86.10 build 986103610

Any ideas?

Thanks in advance

[Chris_Atkinson]

There are some known issues with VPN and T98 per the important notes, amongst them see sk183147.

[the_rock]

I would install take 99, had couple of customers with same issue, latest jumbo fixes all of them.

Andy

[the_rock]

https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Take_99.htm

[the_rock]

One thing I wanted to check with you @certifiedit . If installing jumbo 99 is not possible in the meantime, can you at least send us the log that would show the failure? Also, maybe worth checking if there is anything on port udp 18234 (tunnel test)?

Andy

[certifiedit]

Thanks

Updated to t99. Let's see if it's fixed.

[the_rock]

Please keep us posted.

Andy

[the_rock]

Btw, how long does it take to know whether its broken? Say 5 hours, 10, 15?

Andy