Check Point Quantum Security Gateway 1530 - problem with remote access vpn

[obsidian11]

Greetings checkmates.

First of all, wishing you all happy New Year. May it be filled with good fortunes and opportunities for business.

My client have problem with this Check Point Quantum Security Gateway 1530 locally managed appliance (also connected to SMP). Remote access VPN suddenly stopped working. It uses default SSL VPN port - 443.

When I try to visit https://appliance-domain-example.ddns.net:443  (ddns normally working and pointing to correct IP), it doesnt event show SSL Network Extender (SNX) landing page, as is supposed to. Chrome shows error: ERR_CONNECTION_CLOSED.

I also tried changing that port to e.g. 8443 (and tick checkbox which allows port 443 to be reserved for port forwarding), but no luck.

Besides, when I do that, I even get this:

Error has occurred while applying the Network Objects settings (error 00362). If the problem persists, contact Check Point Technical Assistance Center

Any idea how can I fix this and establish Remote Access VPN again?Site to site VPN works just fine.

Thank you in advance.

[_Val_]

Please look into sk175503

[obsidian11]

Thanks for reply,

it did solve issue with this error 00362 (at least, I think so).

However, problem with remote access vpn still exists. Any idea how to fix this?

It's just strange, suddenly stopped working..

[_Val_]

Not without details. How is Mobile Access Blade configured? Centrally or locally managed appliance? Which software version? Please provide some screenshots also

[obsidian11]

As I said it's locally managed appliance (also connected to SMP).

Firmware version: R80.20.40 (992002691)

Settings are similar to SMB appliance 700 series (which works just fine). Everything is pretty much default.

I also think that there is no any server (or anything) that use port 443 (via NAT rule).

I've attached screenshots below.

[G_W_Albrecht]

Please contact TAC to get help !

[PhoneBoy]

It’s an SMB appliance, thus there is no MAB portal.
If a reboot doesn’t solve the issue, I recommend engaging with the TAC to assist.

[G_W_Albrecht]

sk175503 is not available anymore!

[obsidian11]

Thanks for providing extra info.

My problem is resolved, it wasn't actually checkpoint, it was new GPON router, because router was set to route mode, instead to bridge. Port forwarding solved issue. Thanks everyone. 🙂

[carlosjunior1]

Would you know if another SK will be published in place of this one?
I have error message 00362 and I need to fix it.
Thanks.

[PhoneBoy]

The "solution" documented in the now hidden SK suggests disconnecting the device from SMP and reconnecting it.
If that doesn't apply, then I recommend a TAC case: https://help.checkpoint.com