Mac OS Sequoia Beta 1 - Negotiation with site failed

[macuser79]

Hi everyone,
for work needs I installed Sequoia, the Mac operating system that was released yesterday, on my Macbook Air M1.
Yes, I know it shouldn't be done but developing in the mobile sector, I am forced to always be updated with Apple systems.
I therefore needed to install the VPN client to develop with the test environment, but unfortunately every time I try to connect I always receive the "Client" message.
Below I show you my configuration, maybe it can be useful to someone.

OS version: Mac OS Sequoia Beta 1
Version of Remote Access client: E88.30

Authentication to the VPN occurs in the following way: "Multi-Factor Authentication"

The problem is the following: "Negotiation with site failed"

I start the VPN client, it shows me my company screen to enter the username and password. After correctly entering the credentials, I receive the "Welcome Authenticated By your Identity Provider" screen and then the Safari browser does not close automatically, leaving me with the open screen. Then after a few minutes I receive the error message "Negotiation with site failed".
I would like to be able to change browsers, for example Chrome, but I don't know if that solves the problem.
What can I do ?
Thank you,
Vincenzo

[the_rock]

Thats good to know, but again, and this is just me personally, if something is not supported officially by the vendor, I dont like doing it.

Andy

[vincenzo79]

HI,
I installed all versions of Mac Os Sequoia and noticed that the app never worked.
In the end, I have a Macbook Air with an ARM processor, I opted to use the compatible version for the M1 processor, I find it more performing

[DrAries77]

Dear All,

also with the Sonoma 14.7 there is this issue. The Endpoint Security VPN E87.00 client doesn't work any more.

Regards.

[DrAries77 · Accepted solution]

Dear All,

the issue can be solved by using Chrome as browser... it's strange but it works...

[nico81]

87.00 is an old version, I have installed Sonoma 14.7 back from scratch, and version 88.60 is working fine.

[Fabriciocaete44]

I just installed the update package and solved it.

E88.60 Endpoint Security VPN Clients for macOS - Automatic Upgrade package (PKG) 

[nico81]

I'm still having the issue with 88.60 version, solved changin default browser to Chrome

[BarYassure]

Hi

The first client version that supports Sequoia is 88.70. 

[nico81]

I'm on Sequoia 15.1 Developer Beta 6, still having the issue also with version 88.70

[andree_b]

Hello

We are not able to connect to VPN since upgrade to Sequoia even with 88.70.
Connection to site fails.

The workaround as many mention about above is to copy the SAML URL from Safari to Edge or Google Chrome and sign in from there instead.

When can we expect having access to an updated version of Remote Access client?

Best regards
Andrée Bengtsson

[PhoneBoy]

What @BarYassure said above: the next release (E89) is planned to be released by End of November.

[andree_b]

Thanks @PhoneBoy , sorry I didn’t see that before.

 

best regards 

Andrée

[nico81]

New 88.70 build is out that should fix SAML authentication issue in Safari as written in file description, found update from the installer and installed it, but still doesn't work.
Added also screenshot of the error.
I'll keep using Chrome.

[PhoneBoy]

Please open a TAC case on this.

[PhoneBoy · Accepted solution]

It appears the issue requires both client and gateway fixes.
See: https://support.checkpoint.com/results/sk/sk182711 

[nico81]

Yep, and still not working with new version 89.00 😞

[BarYassure]

Hi @nico81 
Please open a support ticket, I will follow up to see we are handling it. 

[SuppakitARM]

Agree, it still not working with new version 89.00 on Mac Sequoia 

[_Val_]

EPS client is working just fine on my MacOS Sequoia 15.2, and I am running E88.50. If you have issues open a TAC

[andree_b]

Hi Val

The problem occurs only when SAML are used. If you use Radios sign in, then it works.

With the SAML sign-in it does not help to upgrade the VPN client to E88.90. The sign-in token from Safari seems not to reach the VPN client. 

An easy fix for this is to set Edge or Chrome as default browser in MacOS. Then all works fine even with older VPN clients.

/Andrée

[_Val_]

So you know how to work it around, gotcha. I would check with TAC anyway if I were you

[SuppakitARM]

Hi andree_b 

You are right. It occurs only SAML.

Changing the default browser to Chrome. Then all works fine. 

Do we have opened ticket for these already?