Support Center > Search Results > SecureKnowledge Details
Automatic Upgrade for Endpoint Security VPN fails on the R80.x Security Gateway when the Mobile Access blade is enabled Technical Level
Symptoms
  • Automatic Upgrade for Endpoint Security VPN fails.
    After installing the policy, when the client connects to the Security Gateway, the user is prompted for an automatic upgrade to the newer version, and the upgrade immediately fails.
  • Debug logs from the client show:
    3136 3872][1 Aug 2:12:27][talkhttps] ATalkHttps::ssl_packet_receive_cb: called
    [ 3136 3872][1 Aug 2:12:27][talkhttps] ATalkHttps::ssl_packet_receive_cb: HTTP server supports '1.1' version
    [ 3136 3872][1 Aug 2:12:27][TalkCCC] talkccc::ReceiveEv: HTTP server supports '1.1' version
    [ 3136 3872][1 Aug 2:12:27][TalkCCC] talkccc::ReceiveEv: Response status code - 403
    [ 3136 3872][1 Aug 2:12:27][TalkCCC] talkccc::GetIdFromMsg: Invalid fwset. Cannot extract id.
    [ 3136 3872][1 Aug 2:12:27][TalkCCC] talkccc::ReceiveEv: got http error response. Remove front download request
    [ 3136 3872][1 Aug 2:12:27][TalkCCC] talkccc::RemoveRequest: Called with cccError 308
    [ 3136 3872][1 Aug 2:12:27][TalkCCC] talkccc::RemoveRequest: Calling the notify callback for the request 4
    [ 3136 3872][1 Aug 2:12:27][UPGRADE_MANAGER] UpgradeManager::Notify: Error, got 308 errorcode
    [ 3136 3872][1 Aug 2:12:27][TR_FLOW_STEP] TR_FLOW_STEP::TrUpgradeClientStep::UpgradeCompletionCallback: entering...
    [ 3136 3872][1 Aug 2:12:27][TR_FLOW_STEP] TR_FLOW_STEP::TrUpgradeClientStep::UpgradeCompletionCallback: Upgrade failed. Set user_upgrade_mode to REMIND_USER
    [ 3136 3872][1 Aug 2:12:27][CONFIG_MANAGER] ConfigurationManager::removeParam remove 'user_upgrade_mode', source: '3'
    [ 3136 3872][1 Aug 2:12:27][CONFIG_MANAGER] ConfigurationManager::save()
    [ 3136 3872][1 Aug 2:12:27][CONFIG_MANAGER] ConfigurationManager::save()
    [ 3136 3872][1 Aug 2:12:27][slim_utils] RaisDbSetValue: Trying to open or create registry: Software\CheckPoint\TRAC
    [ 3136 3872][1 Aug 2:12:27][slim_utils] RaisDbSetValue: Successfully opened key Software\CheckPoint\TRAC
    [ 3136 3872][1 Aug 2:12:27][slim_utils] RaisDbSetValue: Successfully set (DWORD) key UpgradeAskTime with value 1533107547
    [ 3136 3872][1 Aug 2:12:27][String] String::String::Translate: String with id 9 has been translated to string: Cl
Cause
Environment: The issue occurs with the R80.x Security Gateway with Mobile Access blade enabled.

This is caused by the multi-portal daemon not having a reference for the CSHELL portal when connecting to the site over port 443.


Solution
Note: To view this solution you need to Sign In .