CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SecureClient/SecuRemote
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-11-28
MoreBeer MoreBeer is offline
Junior Member
 
Join Date: 2006-10-25
Posts: 12
Rep Power: 0
MoreBeer has an average reputation (10+)
Default Vista/EVDO/SecureClient NGXR60HFA02 Connection problems

Hi:

We are testing Vista 32bit laptops with SecureClient NGXR60HFA02 (without the recently released Security Hotfix 01) and Verizon EVDO REV A PCMCIA aircards on Lenovo Thinkpad X60s, X61s, and T61Ps.

About 10-15 seconds after the VPN client is connected, the Verizon software reports 'Network Disconnected' and the VPN client disconnects. If I reconnect, the IP address has changed and SecureClient is similiarly furious. I've also tried NDIS mode with the aircard, and same behavior. The aircards work fine with the VPN client running and idle, just not when we build the tunnel. Wifi and wired Ethernet works fine, with and without VPN. We are able to maintain a tunnel when connected to a Linksys WRT54G3G-ST (EVDO to ethernet/wifi bridge/router), and the Verizon cards work fine on our standard XP SP2 builds.

I'm able to reproduce the same behavior using SNX to both a Connectra and a R65 gateway. We hand out 172.x office mode IPs everywhere, so that is the only commonality I can think of so far. When connected to the Verizon network, we do get a routable IP address.

The Secureclient logs show something interesting:

Interface change: PANTECH PC Card WWAN Controller removed

Session drops. Then, 30 seconds later:

Interface change: PANTECH PC Card WWAN Controller interface added, current ip: 169.254.14.242

User Desktop Security Policy Loaded

Interface change: PANTECH PC Card WWAN Controller interface IP changed, previous ip: 169.254.14.242, current ip: 75.xxx.xxx.xxx

So, it looks like something is causing the interface to get removed shortly after the VPN session is established, and re-added after the VPN session drops.

Any ideas?

-mb
Reply With Quote
  #2 (permalink)  
Old 2007-12-07
melipla melipla is offline
Senior Member
 
Join Date: 2006-01-25
Posts: 850
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Vista/EVDO/SecureClient NGXR60HFA02 Connection problems

I had a user with similar symptoms as yours. He was using a usb cellular modem (for at&t) and recently his secureclient connections would drop him 5-20 seconds after he connected. I looked at the logs and it appeared that his client was changing IP addresses, I informed him how this would cause the client to lose connectivity until he reconnected and that he should contact his ISP.

He spent about an hour on the phone with his ISP, the problem ended up being in the accelerator program which was part of his package with the modem. The particular program he used (apparently there are many) is called ByteMobile Acceleration client which is installed on the laptop as part of their Communications Manager application. Instead of uninstalling the program their support had him go into Settings for Communication Manager and change startup type to manual from auto, under advanced tab changed from a standard optimize all supported protocols setting to a custom one where all protocols are moved to the unoptimized column.

It sounded like this was a known problem and sounds eerily similar to yours.

HTH
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 17:02.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0