Windows 11 24H2 Remote Access VPN

[preverite]

Since the general availability of Windows 11 24H2, we're noticing around 50% of Windows machines updated to 24H2 are failing to connect with the Remote Access VPN.

I noticed that with the release of Enterprise Endpoint Security E88.41 (https://support.checkpoint.com/results/sk/sk182237) issues with W11 24H2 were addressed, however the latest version of Remote Access VPN is 88.40.

Are other people experiencing similar issues? Since the RA VPN hasn't been updated but the Endpoint Security client has, I'm wondering whether its known there are issues with the RA VPN.

[shenanigans]

Brilliant thank you, I can confirm this has worked for me!

route_conflict_resolution_method STRING "modify" GLOBAL 1

[radk1961]

I changed my trac_client_1.ttm file per sk182749 and it did not work. Not only that it stopped out macs from working. I changed back to the file before the change and the macs started working again. I then changed the trac.defaults file from route_conflict_resolution_method STRING "delete_create" GLOBAL 1 to  route_conflict_resolution_method STRING "modify" GLOBAL 1 and then the client worked. 

[skandshus]

has anybody tried doing this fix when running VSX?

i just tried doing it on the specific VS gateway and it did not seem to work for me

[Wolfgang]

@skandshus you have to change it in $FWDIR/conf/trac_client_1.ttm. Trac_client_1.ttm will be the same for all VS.

see Updating "trac_client_1.ttm" file in one VS changes it in all other VSs 

[George_Ellis]

Zombie Thread Alert - 

Based on a discussion over in the Microsoft forums, 
https://answers.microsoft.com/en-us/windows/forum/all/vpn-connection-problem-after-windows-11-pro-24...

The OS solution is to install the latest Visual C++ redistributable.

https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170

I am not having the issue, but have forwarded it to my local guys as a probable workaround without monkeying with route settings.

[SenpaiNoticed_U · Accepted solution]

If you are still having issue with Windows 11 24h2, Please see SK182749, you could wither modify the gateway or the client side.

https://support.checkpoint.com/results/sk/sk182749

[Martpres]

Hello,

We have already modified the trac.defaults file and installed the updated VC++ components as recommended. However, the issue persists. Could you please provide further suggestions or alternative solutions?

Thank you in advance for your assistance.

Best regards,

Martin

[SenpaiNoticed_U]

Open a TAC case, mentioning Windows 11 24H2 and SK182749

[Martpres]

Hello,

I wanted to inform you that I have resolved the issue. It turns out I was running the SecureRemote version, which was not utilizing Office Mode IP.

I’m not entirely sure if the solution was also influenced by installing the VC++ versions, as I installed both the x86 and x64 versions.

Thank you for your assistance.

Best regards,
Martin

[Riki]

I am having access denied to that link.. 😞 

The Installation of VC++ components had no effect.