I would look into the VPN client logs and into the firewall's IPsec logs after this happens. To see client logs open the vpn client, on Diagnostics tab click View Logs. For the firewall, enable IPsec diagnostics before hand by rightclicking the cluster > Options > Diagnostics, tick the IPsec checkbox and click OK. Then you can filter firewall logs with IPsec facility or just rightclick the VPN and select Monitoring > Logs by VPN, to see the appropriate logs. Main point is to see whether the tunnel stays up or what happens. Maybe there is some connectivity issue and you see DPD failures in logs etc.
You can find explanations for VPN logs and errors here:
Brilliant advice, thank you! I didn't realise I could activate the VPN logging through diags.
I have just given it a go and the logs on the clusters do not show any interruption (or event) when the VPN connection drops (30 seconds after successfully connecting).
The logs on the clients come up with the following events 30 seconds after the vpn connects:
09:20:35 Received interface information for 5 interfaces
09:20:35 Disabling IKE: no interfaces available
Then when it reconnects:
09:21:27 Received interface information for 5 interfaces
09:21:27 Enabling IKE: interfaces available
Does that mean much to you without knowing more on our config?
I haven't seen this particular log message before, it might be useful to open a support ticket and provide the VPN client diagnostics (client properties, Diagnostics, Collect Diagnostics) to support.
So far this issues is only happening on Surface Pro 4's running windows 10. Another Windows 7 laptop I have used does not drop it's connection.
I'll see if support can help!
i have instability connexion with the wifi when the mc afee vpn 5.9 is installed whenever it is connected or not. As soon as the virtual driver on wifi card is installed, the problem occurs. All users working on Surface Pro3 tablet computers have the problem with Windows 8.1 Enterprise, other tablets like Dell VenuePro with same operating system and configuration do not have the problem. If users work on Surface Pro3 tablet computers with Windows 10 Enterprise, the problem does not occur neither.
I would suggest Bertrand to open a ticket too and provide VPN client diagnostics from one of the affected Win8 Surface tablets to support.
FYI - I have a case opened (SR # <4-13725571761>) for this issue that Nabeel is investigating.
As a workaround changing the VPN to split-tunnelling helps. But unfortunately our requirement is for all traffic to go over the VPN connection once it is up.
We changed it to split tunnelling by removing "Any Network" from the Mobile VPN site and replacing with only the specifc/interesting networks.
I've submitted further diagnostics this morning from when the wireless adapter loses it's IP details.
Lauri - do you have any info on when/if there is going to be a new version of the VPN client released?
6.0.0 comes out in start of May. To my knowledge main changes are Forcepoint rebranding and IPv6 support, but check the release notes for full details once it's out.