VPN issue after installing New Primary FW in the cluster

[EthHack0101]

Hello,

We recently had to RMA a new gateway (5600) into our cluster.

The new FW is working except for authenticating our Remote access workers.

We use a RADIUS server through RSA.

The remote access users are able to authenticate through the Endpoint Checkpoint Security with their 2FA RSA tokens just fine when the traffic is running through our secondary gateway in the cluster.  However, when failing to the primary, users are getting an authentication error.

Hopefully someone can point me in the right direction. 

Thanks,

Jack

[Markus_Genser]

Hello Jack,

I would suggest you check the license on the gateway and usercenter.

It happens that not all features are correctly transferred in a RMA and you're hitting an licensing issue.

The second thing that comes to mind would be to compare both gaia config and kernel parameter if there's something missing or file configurations in general for RSA.

BR,

Markus