Troubleshoot the Check Point integration

If the browser has no response to sslVPN url , it may be a network connection issue.

;In the gateway, use command: show route, ping, to see network connectivity information:

VPN connections are good, but you are unable toconnect to the web server in the private network.

Possible solutions

• Network routing for the web server

• Ensure the VPN communities setting contains this private network.

Issues accessing the terminal via SSH

Open theadmin webpage. As shown below:

General troubleshooting.

Navigate toSmartConsole > Logs&monitor.
Select one of the pre-defined queries such as Query > Access > Mobile Access > All.

User is unauthorized error message,

check the policy and also verify the RADIUS group setting, and the group attribute.
In freeRADIUS you can use tcpdump to check if the group attribute number matches with Check Point ( default 25) .

If you are using windows OS, you can use Wireshark to capture packets.
For example:

$sudo tcpdump -i eth0 port 1812 or port 1813 or port 3799 -vv
…
Access-Accept…… Class Attribute (25)<------you will see here RADIUS returned the group using attribute number 25.

1. Open GuiDBedit.
2. Slick Global Properties, firewall_properties.
3. Scroll to radius_groups_attr.