Ikev2 support for RA vpn clients in R82

[the_rock]

Hey guys,

I really hope someone can clarify this for me, because logically, its not clear at all, to me, anyway. So, below sk states following:

https://support.checkpoint.com/results/sk/sk166415

Currently, Security Gateway does not support for IKEv2 connections from Remote Access VPN Clients.

Implementing IKEv2 support is on our roadmap.

It is expected to be available in the R82 release.

Well, R82 is now officially GA, yet, we see this in smart console global properties. Im not sure I understand what word some means in this context...are we talking certain version of vpn clients? if so, which ones?

Thanks as always!

Andy

[Chris_Atkinson · Accepted solution]

Ultimately yes whilst support is for E88.40 and higher, it also appears that some client versions are impacted by the following limitation e.g E87.60 / E87.62

ESVPN-4235 Connection to R82 Security Gateway may fail if IKEv2 protocol is enabled on that Security Gateway.

[HeikoAnkenbrand · Accepted solution]

The info can be found in the following sk181127.

CUT>>>
- What's New in R82
  - Remote Access VPN

• Security Gateway now supports the IKEv2 protocol for connections from Remote Access VPN Clients (E88.40 and higher).

<<<CUT

[the_rock]

Thanks a lot, appreciate it!

Andy

[the_rock]

Thanks Chris!

Andy

[THX1138UK]

IKEv2 still doesn't work for Windows VPN Clients ☹.

I am using R82 (Release Version) in my Home Lab:

SK166415 Updated on 31st October 2024:

R82 – Global Properties:

If Prefer IKEv2, support IKEv1 is selected, then the Windows Client only uses IKEv1.

CheckPoint VPN Client for Windows E88.60 – Installed on Windows 11 Pro v24H2:

CheckPoint VPN Client for Windows E88.60 – Latest available (CheckPoint Mobile Mode):

In addition to E88.60, I also tested E88.40. There is nothing in any release notes that mentions support for IKEv2.

The only VPN client that I have tested that will successfully negotiate IKEv2 with the Security Gateway is Capsule Connect for iOS.
(I don’t have an Apple Mac or Android device available for testing).