CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SecureClient/SecuRemote
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-02-13
Junior Member
 
Join Date: 2006-02-13
Location: Austria
Posts: 12
Rep Power: 0
Wonzling has an average reputation (10+)
Default Securemote Connection Timeout

Hi there,

I'm a network administrator with numerous clients using Securemote to connect to our IP330 Firewall. Everything works fine, except one client who always gets a connection timeout when trying to setup a connection to IP330. The logs on the IP330 show his connection attempts, but everything passes, nothing is blocked.

So why doesn't he receive a connect? It's obviously a client problem since everybody else can connect. It also can't be a problem with the login and password, since the client doesn't even get there, the timeout occurs when trying to establish a site. The client doesn't seem to have any problems besides that.

So what could be common configuration errors on my side?

I appreciate your feedback.

Yours

Till
Reply With Quote
  #2 (permalink)  
Old 2006-02-13
Junior Member
 
Join Date: 2005-09-14
Location: Wales
Posts: 9
Rep Power: 0
recrui has an average reputation (10+)
Default Re: Securemote Connection Timeout

Hi,
Is his time and date settings on the PC correct?
Reply With Quote
  #3 (permalink)  
Old 2006-02-13
Senior Member
 
Join Date: 2006-02-09
Location: Charleston, SC
Posts: 291
Rep Power: 3
lammbo has an average reputation (10+)
Default Re: Securemote Connection Timeout

Actually, it could be an issue with the login. I know this isn't exactly what you asked for, but without more details, I don't know exactly what testing you've completed so I'll start at the beginning.

You should obtain the credentials and test them yourself on a machine that is known good to insure the user's account is good. Sometimes database corruption can occur in an object. If the credentials are good, then the issue resides either on the remote machine or network.

To determine if the machine's host network as a cause or not, try the machine from a different location or try another (known good) machine at the location in question. This will rule in or out the connecting network. Sounds like this is most likely not the issue so this can probably be skipped.

If you get this far and you know the location is not the cause, you have it narrowed down to the machine in question as the root cause of the issue. Download and run the latest cpclean utility to remove the VPN client. Reboot. Re-install the client. As the last poster stated, verify the time on the remote PC but also the time zone settings.

Users who like to install software are another issue. I frequently have users who think they know better and decide they need zone alarm on thier laptop because... well, because of any stupid reason you can possibly dream of - that breaks SecureRemote/SecureClient every time I've seen it installed, often with very odd and unexpected results. Also, many other VPN clients (and I'm sure many other software packages) will break this as well as they insert themselves in the stack and can also wreak havok.

Hope this basic troubleshooting guide helps because it's sometimes difficult to really find the cause.
__________________
There's no place like 127.0.0.1
Reply With Quote
  #4 (permalink)  
Old 2006-02-14
Junior Member
 
Join Date: 2006-02-13
Location: Austria
Posts: 12
Rep Power: 0
Wonzling has an average reputation (10+)
Default Re: Securemote Connection Timeout

Thank you for your kind help. I'll check your hints and keep you informed how they work.

greets from Austria
Till
Reply With Quote
  #5 (permalink)  
Old 2006-02-15
Junior Member
 
Join Date: 2006-02-13
Location: Austria
Posts: 12
Rep Power: 0
Wonzling has an average reputation (10+)
Default Re: Securemote Connection Timeout

It was a client firewall problem. Although the sygate firewall was disabled it apparently still blocked some traffic, which prevented the login screen from poping up. After removing the firewall we had no more problems.

Thanks for the hint lammbo.

Till
Reply With Quote
  #6 (permalink)  
Old 2006-02-15
Senior Member
 
Join Date: 2006-02-09
Location: Charleston, SC
Posts: 291
Rep Power: 3
lammbo has an average reputation (10+)
Default Re: Securemote Connection Timeout

Quote:
Originally Posted by Wonzling
It was a client firewall problem. Although the sygate firewall was disabled it apparently still blocked some traffic, which prevented the login screen from poping up. After removing the firewall we had no more problems.

Thanks for the hint lammbo.

Till
You're quite welcome, please approve my solution and bump up my rating if you don't mind.
__________________
There's no place like 127.0.0.1
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 14:15.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0