VPN connection disconnects after few seconds

[Webnoob]

I have Quantum Spark 1570 Appliance installed firmware R81.10.17.
Gateway have Radius connection to AD and have Azure MFA extension installed on NPS server.

I have one user who is unable to keep VPN connection .
Connection is established but after a few seconds get disconnected.

I have collected log from the client but not sure what I should be looking for.

User is running Windows 11 ver. 24H2 Build 26100.4652 and VPN client E88.30 Build 986105506

It is only that one user who is experiencing this problem.

[Chris_Atkinson]

Recommend updating him/her to E88.62 or later per:

https://support.checkpoint.com/results/sk/sk182749

[Webnoob]

Actually just upgraded to E88.70 and the symptoms are different. Now the client is reconnecting after 20 sec, connected and again reconnecting in an endless cycle.

[the_rock]

I know latest client version, E89, is pretty stable. See if that makes any difference.

Andy

[Webnoob]

Cannot find E89.x for Windows, only MacOS

[the_rock]

https://support.checkpoint.com/results/download/135200

[G_W_Albrecht]

Anything that makes this users machine so special compared to the others that work ? Can other users logging into RA VPN on this machine see the same issue ?

[Webnoob]

Other users using this machine for RA VPN is experiencing the same issue.

[G_W_Albrecht]

I do not think new versions will resolve the issue as this is the only client with it. Better completely re-image the workstation, only install needed SW and retry!

[Webnoob]

I have testet the issue all possible ways
The last thing I noticed was when the computer where connected to mobile hotspot the computer connected to the internet with the same WAN ip as the firewall has.
Next time I am onsite I will test it with other devices and check if any static routes have been configured or if there are any misconfigured ip addresses.

[the_rock]

That actually sounds logical.

Andy

[Timothy_Hall]

There are quite a few things that can cause this exact behavior, see here:

sk44075: Endpoint Connect client disconnects every 20 seconds after connecting successfully to VPN G...

sk172184: Remote Access client behind NAT disconnects after 20 seconds in Visitor Mode

[Webnoob]

The symptoms in sk44075 are not pressent in the log.

The fix applied in R80.40 should be in the running R81.10.17 firmware, so not sure sk172184 applies to my issue.

[the_rock]

I still think point 4 would be good to check from the sk44075.

Andy

[Webnoob]

You might have overseen that the device is Quantum Spark 1570 Appliance locally managed

[the_rock]

k, nm then, not applicable. Any luck if you tried E89 client?

Andy

[Webnoob]

Tried E89.00 and the symptoms changed to are reconnecting loop

[the_rock]

I would definitely open TAC case for this then.

Andy

[Webnoob]

Already done that

[the_rock]

What did they say so far?

Andy

[Webnoob]

They couldn't find the cause for the issue.
We checked konfiguration, looked in the logs and checked firewall settings.

I am onsite to day, so when the user checks in I will try again.

[Chris_Atkinson]

Does the device have multiple WAN interfaces in use?

Advanced Settings wise we have two parameters with 20-second values.

One for back connections the other for SNX keepalives.

[Webnoob]

No only one WAN interface and only one user with the issue