Remote access VPN hardware/Driver compatibility

[OU812]

I am assisting a customer that is using the checkpoint remote VPN with a NIC that is not one of the big names.  They are having some issues and I noticed someone mentioned in another post that there are certain NIC drivers that are supported and others that are not.

Where can I find that information?  The only HCL I found only showed server models.

I want to verify it should work before wasting time troubleshooting.

The NIC is a 10G from Aquantia. 

[PhoneBoy]

Please provide some more details like:

• Version of Endpoint client
• Version/patch level of Windows
• Exact issues you are seeing

Beyond the requirement for Intel CPU for most functions, there is no HCL for Endpoint/Remote Access. 

[OU812]

Thanks. I am working on getting those details.  The issue that is being seen is that the link is "Lost" and requires a reboot to recover, I say "Lost" as they have not provided system logs that confirm the physical link is actually going down. 

They Isolated it to only happening when the VPN software is installed.  It does not even have to be enabled, just installed on the system.  If they uninstall the software the issue stops happening.

It is very random and happens at multiple sites and home users that have a 10Gb home router, so there is no common switch, router or cable involved.  Just this specific vendor NIC and the VPN software.

Is there any logging that can be collected to indicate what the software is seeing when this happens?

[PhoneBoy]

The client itself has logs that can be collected, which may provide some clues as to what is happening.
If these are Windows clients, make sure you're on the E88.62 release as earlier releases are known to have issues with Windows 11 24H2: https://support.checkpoint.com/results/sk/sk182996 

Most likely, you're going to have to engage with TAC on this.
However, a LOT more details will be necessary before you can do this. 

[the_rock]

Personally, I never heard of such limitation for VPN. Last time I checked, there was nothing about it in HCL either. Wjhat kind of issue are you havinbg? Maybe try latest client E88.62 for starters and see if problem is there.

Andy