Problem with SSL Network Extender (page cannot be displayed)

[xavmoss]

I have problem with SNX, some of client is cannot access the SNX page. They got page cannot be displayed. I also get same problem when using IE and Opera browser before I can using this two browser to access SNX page. Suddenly I cannot access using Opera and followed by IE but I still can open using Mozilla. Do you have same problem? Please help, thanks. This problem give me headache.

[emils]

Have the same problem, IE 9 doesn't open SNX page, but IE 6,7,8 - does. Have tried Chrome - not working.
The problem starts after some MS Windows (in my case - Win7) updates.

And looks like guilty update is KB2585542. I'm uninstall this update and now I can open SNX page.

P.S. that KB2585542 problem applies not only on SNX ...
http://social.technet.microsoft.com/...3-1d3fd2ff4931

[mcnallym]

Change the Encryption setting from

AES, 3DES

to

AES, 3DES, RC4

in the Global Settings for the

Remote Access / SSL Network Extender

Install Policy to the Gateways.

I found this in the area that you linked too. I have spoken with Check Point TAC via livechat to confirm this and R&D are working on a fix, however no ETA.

We have had a couple of customers report this issue, and seems to have fixed for them.

[emils]

Changing the Encryption setting from "3DES" to "3DES or RC4" (R65) - helps in my case.

Thanks !

[Routerkid1]

Changing the Encryption setting from "3DES" to "3DES or RC4" (R65) - helps in my case.

Thanks !

Yea it fixed my problem on R70.40, Thanks Mickeysoft

[luthor02]

Same here with me. I have problem connecting to SSL Network Extender via Firefox 11 and IE 9.

I have uninstalled the KB KB2585542 but only solved for Internet Explorer Issue not the Firefox . Does Checkpoint already release the new patch for this SNX?

Note: Currently my checkpoint is using R75

[RayPesek]

You should be thanking them. :-)

See this for more information: http://www.phonefactor.com/resources...onForBeast.pdf

If you haven't run your websites or your SSL VPNs through https://www.ssllabs.com/ssldb/index.html you might want to do so.

Ray

[accesslimiter]

I got one on IPSO R75.20 that is also seeing the SNX page display failure using IE after applying MS update KB2585542 or upgrading FF to 10.x, the global SSL props are already set to AES, 3DES and RC4, on R75.20 it is the default. What has me dumbfounded is I cannot duplicate this on any test system running splat, R75, .10, .20 or .30, I've tried 6 different machines and can't break it . For those with the same problem/fix, what platforms and specific ver/hfa are you running? And are you running plain SNX or SNX within mobile access? Thanks,

[accesslimiter]

CP just supplied me a hotfix specific for free BSD, fw1_HOTFIX_FLO_HF_HA20_148_730148001_1, once tested I'll update my results

[jdenver]

you can find this issue documented under check point sk67100.

CP just supplied me a hotfix specific for free BSD, fw1_HOTFIX_FLO_HF_HA20_148_730148001_1, once tested I'll update my results

[sawant.arjun@gmail.com]

I have problem with SNX, some of client is cannot access the SNX page. They got page cannot be displayed. I also get same problem when using IE and Opera browser before I can using this two browser to access SNX page. Suddenly I cannot access using Opera and followed by IE but I still can open using Mozilla. Do you have same problem? Please help, thanks. This problem give me headache.

Hi,

There is problem for SNX in windows 7, getting error page cannot be disply.
For that there is workaround
In Internet Explorer Setting - Advanced uncheck USE TLS 1.0 and test.
Also there is hotfix ilsiebel01_7212_4560_0_fw1_HOTFIX_ELSA_HF_HA10_091 .gz for permanent soln.

Arjun