Windows 11 24H2 Remote Access VPN

[preverite]

Since the general availability of Windows 11 24H2, we're noticing around 50% of Windows machines updated to 24H2 are failing to connect with the Remote Access VPN.

I noticed that with the release of Enterprise Endpoint Security E88.41 (https://support.checkpoint.com/results/sk/sk182237) issues with W11 24H2 were addressed, however the latest version of Remote Access VPN is 88.40.

Are other people experiencing similar issues? Since the RA VPN hasn't been updated but the Endpoint Security client has, I'm wondering whether its known there are issues with the RA VPN.

[the_rock]

Glad we can help.

Andy

[SenpaiNoticed_U]

The issue is unique to Windows 11 24h2 due to a windows compatibility with an updated routing scheme.

[abalestri]

All, we are facing this issue using the standalone remote access VPN client (both E88.70 and E89.00) on windows 11 25H2 client. Can you please confirm  if the issue is resolved on the full endpoint client and if I can hope for a solution on the stand alone ?

Thanks     

[PhoneBoy]

In terms of Remote Access functionality, there is no difference between Endpoint and Standalone.
None of the current versions support Win 11 25H2 (Endpoint or Standalone).
It's on the roadmap (target release is E89.05, though subject to change).

[abalestri]

Thank you for your reply, The E89.05 is not available as standalone yet. 

Apparently the issue is not resolved even on WIN 11 24H2.

I have at least two users who claim to have the issue

U1  --> Standalone ver. 88.70   on Win11 25H2

U2 --> Standalone ver. 88.70   Versione Windows 11 25H2

U3 --> Standalone ver. 88.70   Versione Windows 11 24H2

U4 --> Standalone ver. E89.00  Versione windows 11 24H2

and other users who have even older versions of the standalone client (i.e. 88.60) with absolutely no problem.

Any thoughs ?

Thanks 

A. 

[PhoneBoy]

I suggest opening a case with TAC.

[abalestri]

I did it a couple of weeks ago , but with no particular luck. 

[PhoneBoy]

Please send me the SR(s) in a PM and I will investigate.

[jamesd1343]

Aloha! we held off for a year on 24h2 with the various issues it created (not including this one as there was no mass email sent out to customers regarding the issues) and just now pushing out 24 and 25 to clients and being hit with these vpn problems.

as i read it here no client supports 25h2 and 24h2 v89x should work? this sort of makes sense as i repaired clients getting 24h2 with the latest client then they got 25h2 and died again. Nightmarish to say the least...

mahalo for any more insight

[PhoneBoy]

The target release for this support is E89.05 per: https://support.checkpoint.com/results/sk/sk115192 
However, it's still not GA.

[jamesd1343]

i can second the randomness of the breakage. many 88.30 clients working ok with 24h2 but some broke and an 88.61 or later client update fixed them. it seems those having gone through the upgrade process are ok but clean installs dont work? not completely sure of that. blocked rollout of 25h2 after a few clients broke with no solution. I have one working 25h2 with the v89 client installed at the moment and stopping there till further notice from checkpoint.

[jamesd1343]

aloha saw this and froze the 25h2 update almost just in time...any news on a supported client for that patch level yet (E89.05 ?)

[D136082]

@PhoneBoy : Please reply to that!

[PhoneBoy]

It is E89.05: https://support.checkpoint.com/results/sk/sk183617