Troubleshooting Remote VPN Blade

[Swiftyyyy]

Hi,

I have a reasonably simple question; does documentation exist which describes or at least helps an administrator parse the contents of CPinfo, specifically related to the "EPC" (Endpoint Connect) directory component of Harmony Endpoint?

I've recently received a case where the end user experiences intermittent issues with their VPN, but I'm struggling to make heads or tails from the logs provided.

Regards,

Luka

[Arik_Ovtracht]

Hi,

The DiagnosticsView tool can help with opening a cpinfo file and viewing the content.

See https://community.checkpoint.com/t5/General-Topics/DiagnosticsView-CPInfo-Viewer/td-p/27551 

and https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Swiftyyyy]

Thanks! This will be a helpful tool in the future, but does it also apply to the cpinfo gathered from Endpoints?
I'm not entirely sure which file I'm supposed to open in the tool; the "cpinfo.HostName.TimeDate.zip" format file doesn't open; is there a specific thing I need to find in the extracted directory?

[PhoneBoy]

What is the precise nature of the issue?
VPN issues generally require specific debugging steps to be performed which won’t show up in cpinfo necessarily (on either client or server end).

[Swiftyyyy]

Supposedly an end user experienced issues with VPN connectivity whilst in-office (though connecting to a partner site), but the VPN functioned fine while working from home.

I'm guessing the issue is more than likely located elsewhere on the office network since VPN issues are practically unheard of in our environment otherwise.
But I still have to eliminate the suspicion of it being an EPS fault (as is usually the case with basically every issue ever).

So knowing some basic parsing skills for Endpoint Connect logs would at least let me say with a degree of confidence "hey, I don't see any stand out errors".

[PhoneBoy]

Like I said, issues with an active VPN connection won't necessarily show in the logs collected by cpinfo.
Specific debugging must be enabled, which I believe must be done on the gateway side of things.
You can do some packet captures from the client as well: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...