Ssl vpn does not work whit usg40

Promos
Promos Posts: 5  Freshman Member
First Comment Third Anniversary
in Security

Hi, I have this problem with a usg40 (I have other configurations working correctly on other types of models, for example atp 100 , usg 60 , usg 110 and usg 210).

When I try to connect in ssl vpn on this usg 40 last updated firmware, the ssl vpn from me does not start and gives me the following error (il log del secuextender):

[ 2023/02/22 15:47:58 ][SecuExtender Helper] Request(104): REMOVE 515025088/2728275805 15 4294967295 4294967295

[ 2023/02/22 15:47:58 ][SecuExtender Helper] Remove Routing

[ 2023/02/22 15:47:58 ][SecuExtender Helper] Remove prioritize routing

[ 2023/02/22 15:47:58 ][SecuExtender Helper] Get netsh path = powershell

[ 2023/02/22 15:47:58 ][SecuExtender Helper] Set-NetIPInterface -InterfaceAlias "Ethernet 2" -InterfaceMetric 30

[ 2023/02/22 15:47:58 ][SecuExtender Helper] ZyShellExecute start.

[ 2023/02/22 15:48:02 ][SecuExtender Helper] ZyShellExecute WaitForSingleObject() result = 0

[ 2023/02/22 15:48:02 ][SecuExtender Helper] GetExitCodeProcess

[ 2023/02/22 15:48:02 ][SecuExtender Helper] lpszFile = powershell, lpszParam = Set-NetIPInterface -InterfaceAlias "Ethernet 2" -InterfaceMetric 30, dwExitCode = 1, dwError = 0

[ 2023/02/22 15:48:02 ][SecuExtender Helper] Failed to read from client(2): 109, 0

[ 2023/02/22 15:48:02 ][SecuExtender Helper] Start to Disconnect pipe...

[ 2023/02/22 15:48:02 ][SecuExtender Helper] Shutting down a pipe connection instance...

[ 2023/02/22 15:48:02 ][SecuExtender Helper] ==============================

Accepted Solution

  • Zyxel_James
    Zyxel_James Posts: 663  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 100 Answers
    Answer ✓

    Hello @Promos

    The problem is fixed by enabling the option Enable Network Extension (Full Tunnel Mode)

    James

All Replies

  • Zyxel_James
    Zyxel_James Posts: 663  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 100 Answers

    Hello @Promos

    Welcome to Zyxel Communtiy!

    Is there anything in the USG40 logs? it could be a clue, and may I know your SecuExtender version? is it the same PC you connected to previously?

    James

  • Promos
    Promos Posts: 5  Freshman Member
    First Comment Third Anniversary

    hi james, thanks for the reply.

    I think the problem is not on the client side because I use my pc for other connections with other Zyxel firewalls and everything works very well. I think the problem is on the firewall side because I can't connect from another client either. Anyway my client version is SSL_VPN_Client_4.0.4.0.

    Post the logs on the firewall side at the time of connection. For now I've done a workaround with an l2tp connection

    Immagine 2023-02-23 082903.png

  • Zyxel_James
    Zyxel_James Posts: 663  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 100 Answers

    Is it a local user or an external user?

  • Promos
    Promos Posts: 5  Freshman Member
    First Comment Third Anniversary

    It is a local user

  • Zyxel_James
    Zyxel_James Posts: 663  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 100 Answers

    Hello @Promos, I've contacted you in PM for further checking, please check your inbox, thank you.

  • Zyxel_James
    Zyxel_James Posts: 663  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 100 Answers
    Answer ✓

    Hello @Promos

    The problem is fixed by enabling the option Enable Network Extension (Full Tunnel Mode)

    James

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）