GAIA EMBEDDED - ERROR TRYING TO ACCESS THROUGH VPN CLIENT

[AfterMath]

[_Val_]

Instead of posting pictures, please explain what kind of site you are trying to setup, and what is the actual use case. What are you using on GW side and on client side?

[AfterMath]

OFFICE1 (GW SIDE)

OFFICE2 (CLIENT SIDE)

[_Val_]

I repeat the question: what are you using on the GW and client side? Appliance type, software version, same for the client.

[AfterMath]

First, thanks for your patience #Val

Office 1 (GW SIDE)

Check Point 730 Appliance (Locally Managed)
Version: R77.20.51

Office2 (Client side)

Endpoint Security VPN E84.50 and i tried also old version

[the_rock]

Im not good with embedded gaia by any means, but I know @G_W_Albrecht definitely is, so maybe he can give you some pointers, I will say though, based on your very first screenshot, it says site does not support use of this client. Have you tried using different vpn client version? I can tell you that most of the time with regular firewalls when you see similar errors, it usually has to do with visitor mode not being enabled, but not sure if thats applicable to your scenario.

[AfterMath]

Thanks #The_rock

Yes, i tried different version, even this very old

[the_rock]

Message me directly, lets do quick remote session if you have time.

[G_W_Albrecht]

Compliance Blade ? My StandAlone client does not have this blade. Sure you downloaded that client:

[AfterMath]

No link to dowload...

[G_W_Albrecht]

Never seen that - i wonder how you have been able to download the other versions, but you better ask TAC for the client...

[_Val_]

Mobile client means SSL VPN, you may want to un-check this option and try again. Also, it would make sense to upgrade to the latest firmware: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=o...

[PhoneBoy]

This SK suggests a license issue: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 
However, I'm pretty sure the 700 series has the necessary license embedded in it (or should).
What is the output of cplic print from the appliance?

[PhoneBoy]

Did you install your VPN client as Endpoint Security @AfterMath ?
That might explain this message.
Recommend installing as Check Point Mobile which should be covered by the license in your appliance.

[AfterMath]

I tried the two ways, still dont working..

[PhoneBoy]

Can you please provide the output of cplic print?
Otherwise all I can suggest is a TAC case.

[AfterMath]

[Tom_Hinoue]

Maybe you have a NAT rule on CP730 forwarding port 443 to your internal servers? (wondering from your other post where it is detecting a hotspot)

If you do, you will need to configure in advanced settings to reserve port 443 for port forwarding, and assign a different port for Remote Access.

[PhoneBoy]

This doesn't tell me what I'm looking for.
The output of a CLI command will give me more precise details that aren't reflected in this screenshot.

And the point about usage of port 443 for a server/port forwarding is also something to check for as well.

[AfterMath]

[PhoneBoy · Accepted solution]

The SSLVPN-50 was what I am expecting to see, which means it’s not a license issue.
In any case, the only things I can suggest are:

• Updating to latest firmware
• Engaging with our TAC for further assistance

[AfterMath]

Ok
Ill try and ill be saying something after this process..

Thanks..!

[AfterMath]

Thanks to all of you!

It´s working, i did the firmware upgrade, and renewed the certificate on the gateway before connecting from the client.