Ssl vpn does not work whit usg40

Options

Hi, I have this problem with a usg40 (I have other configurations working correctly on other types of models, for example atp 100 , usg 60 , usg 110 and usg 210).

When I try to connect in ssl vpn on this usg 40 last updated firmware, the ssl vpn from me does not start and gives me the following error (il log del secuextender):

[ 2023/02/22 15:47:58 ][SecuExtender Helper] Request(104): REMOVE 515025088/2728275805 15 4294967295 4294967295

[ 2023/02/22 15:47:58 ][SecuExtender Helper] Remove Routing

[ 2023/02/22 15:47:58 ][SecuExtender Helper] Remove prioritize routing

[ 2023/02/22 15:47:58 ][SecuExtender Helper] Get netsh path = powershell

[ 2023/02/22 15:47:58 ][SecuExtender Helper] Set-NetIPInterface -InterfaceAlias "Ethernet 2" -InterfaceMetric 30

[ 2023/02/22 15:47:58 ][SecuExtender Helper] ZyShellExecute start.

[ 2023/02/22 15:48:02 ][SecuExtender Helper] ZyShellExecute WaitForSingleObject() result = 0

[ 2023/02/22 15:48:02 ][SecuExtender Helper] GetExitCodeProcess

[ 2023/02/22 15:48:02 ][SecuExtender Helper] lpszFile = powershell, lpszParam = Set-NetIPInterface -InterfaceAlias "Ethernet 2" -InterfaceMetric 30, dwExitCode = 1, dwError = 0

[ 2023/02/22 15:48:02 ][SecuExtender Helper] Failed to read from client(2): 109, 0

[ 2023/02/22 15:48:02 ][SecuExtender Helper] Start to Disconnect pipe...

[ 2023/02/22 15:48:02 ][SecuExtender Helper] Shutting down a pipe connection instance...

[ 2023/02/22 15:48:02 ][SecuExtender Helper] ==============================

Accepted Solution

  • Zyxel_James
    Zyxel_James Posts: 616  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    Hello @Promos

    The problem is fixed by enabling the option Enable Network Extension (Full Tunnel Mode)

    James

All Replies

  • Zyxel_James
    Zyxel_James Posts: 616  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hello @Promos

    Welcome to Zyxel Communtiy!

    Is there anything in the USG40 logs? it could be a clue, and may I know your SecuExtender version? is it the same PC you connected to previously?

    James

  • Promos
    Options

    hi james, thanks for the reply.

    I think the problem is not on the client side because I use my pc for other connections with other Zyxel firewalls and everything works very well. I think the problem is on the firewall side because I can't connect from another client either. Anyway my client version is SSL_VPN_Client_4.0.4.0.

    Post the logs on the firewall side at the time of connection. For now I've done a workaround with an l2tp connection

  • Zyxel_James
    Zyxel_James Posts: 616  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Is it a local user or an external user?

  • Promos
    Options

    It is a local user

  • Zyxel_James
    Zyxel_James Posts: 616  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hello @Promos, I've contacted you in PM for further checking, please check your inbox, thank you.

  • Zyxel_James
    Zyxel_James Posts: 616  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    Hello @Promos

    The problem is fixed by enabling the option Enable Network Extension (Full Tunnel Mode)

    James

Security Highlight