GFI Software Aurea SMB Solutions


Home » GFI User Forums » Kerio Control » upgrade 9.2.8 - problem tunnel vpn
upgrade 9.2.8 - problem tunnel vpn [message #144494] Wed, 28 November 2018 13:16 Go to next message
Ufficio IT - Erreà Sport is currently offline  Ufficio IT - Erreà Sport
Messages: 10
Registered: April 2005
hi
i have a secondary kerio firewall (9.1.5)
I have updated it to the latest version (9.2.8); the vpn tunnel that exists between this firewall and the main one (kerio 9.1.4) does not work.
Luckily I had a snapshot and I came back.

vpn compatibility issues?

thanks
Re: upgrade 9.2.8 - problem tunnel vpn [message #144499 is a reply to message #144494] Wed, 28 November 2018 15:40 Go to previous messageGo to next message
ian.bugeja is currently offline  ian.bugeja
Messages: 337
Registered: March 2017
Location: Malta
Hi

Kerio Control 9.2.8 introduces a new encryption mechanism for the VPN, however which Kerio Control is acting as the "server" in this case. Please update that one to 9.2.8 first.


Ian Bugeja
GFI Software
Re: upgrade 9.2.8 - problem tunnel vpn [message #144501 is a reply to message #144494] Wed, 28 November 2018 17:26 Go to previous messageGo to next message
mwgbr is currently offline  mwgbr
Messages: 51
Registered: June 2012
Definitely no problems here with VPN when both sides are on 9.2.8.
Re: upgrade 9.2.8 - problem tunnel vpn [message #144503 is a reply to message #144494] Wed, 28 November 2018 19:44 Go to previous messageGo to next message
JeriMind is currently offline  JeriMind
Messages: 12
Registered: March 2016
yes same problem here. control 9.28 connect to 9.27 don't work.
after upgrade the "server" to 9.28 - it works fine

I think this is a important info for changelog!
Re: upgrade 9.2.8 - problem tunnel vpn [message #144507 is a reply to message #144494] Thu, 29 November 2018 06:50 Go to previous messageGo to next message
AlexVP is currently offline  AlexVP
Messages: 1
Registered: November 2018
Does this problem affect users with older VPN-client versions?
Re: upgrade 9.2.8 - problem tunnel vpn [message #144508 is a reply to message #144494] Thu, 29 November 2018 07:17 Go to previous messageGo to next message
LittleIndian is currently offline  LittleIndian
Messages: 6
Registered: December 2010
We encountered exactly the same problem, i.e. all VPN went down when we upgraded one of our firewall to v9.2.8

The solution is to make sure Kerio Control with version lower than 9.2.8 (the client) initiate the VPN connection to Kerio Control with version greater or equal to 9.2.8 (the server)

To do this, set the VPN mode as active on the client and passive on the server
Re: upgrade 9.2.8 - problem tunnel vpn [message #144513 is a reply to message #144507] Thu, 29 November 2018 14:03 Go to previous messageGo to next message
nigelayres is currently offline  nigelayres
Messages: 24
Registered: September 2013
Location: United Kingdom
I am about to upgrade clients' servers to 9.2.8 but they have a number of remote users with older VPN client versions.

It is essential to know whether the new server version will block the older clients before I embark on the upgrade. The release notes don't mention this at all, as far as I can see.

Moreover, if a user had automatic upgrade set and the clients are indeed broken, this seems like a major oversight.

[Updated on: Thu, 29 November 2018 14:06]

Report message to a moderator

Re: upgrade 9.2.8 - problem tunnel vpn [message #144522 is a reply to message #144513] Thu, 29 November 2018 22:43 Go to previous messageGo to next message
ian.bugeja is currently offline  ian.bugeja
Messages: 337
Registered: March 2017
Location: Malta
Older Clients will still work for version 9.2.8.

You can have client 9.2.7 and server 9.2.8 and VPN works.

While this works we encourage everybody to upgrade the clients soon.


Ian Bugeja
GFI Software
Re: upgrade 9.2.8 - problem tunnel vpn [message #144526 is a reply to message #144522] Fri, 30 November 2018 08:21 Go to previous message
Ufficio IT - Erreà Sport is currently offline  Ufficio IT - Erreà Sport
Messages: 10
Registered: April 2005
the tunnel vpn is ok if firewall (with v. 9.2.Cool is passive and firewall (with v.9.2.7 or older) is active!
the problem is that there must be some more detailed documentation especially when there are upgrades with important news.
And remember .....not everyone can upgrade all firewalls at the same time and in a short time!

thanks
Previous Topic: Why is TLS 1.0 still available?
Next Topic: System erros - automatic restarts
Goto Forum:
  


Current Time: Wed Nov 20 06:08:26 CET 2019

Total time taken to generate the page: 0.04469 seconds