Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

VIA 4.3.0 for iOS stopped working

This thread has been viewed 41 times

  • 1.  VIA 4.3.0 for iOS stopped working

    Posted Dec 22, 2021 05:08 AM
    Hello Friends!

    It looks like VIA VPN for iOS/iPadOS stopped working since the update to 4.3.0 which came last week.
    A few devices with the older 4.2.0 are still working. 
    Can anyone confirm this issue?

    Best regards,
    Sven

    ------------------------------
    Sven Dregorius
    ------------------------------


  • 2.  RE: VIA 4.3.0 for iOS stopped working

    EMPLOYEE
    Posted Dec 22, 2021 06:17 AM
    Is there an error message?

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
    ------------------------------

    Original Message


  • 3.  RE: VIA 4.3.0 for iOS stopped working

    Posted Dec 22, 2021 08:31 AM
    Hi Colin,

    The app just says "VPN connection disconnected" without any "connected" status before.

    Here is a snippet from the App generated log file:
    2021-12-22 11:57:02,135 ERROR - viaplugin_proto_isakmp:setAuthProfile:1501 Auth profile allocated buffer length - 33
2021-12-22 11:57:02,135 ERROR - viaplugin_proto_isakmp:setAuthProfile:1508 Auth profile set to VIA Auth Profile : via-auth-prof
2021-12-22 11:57:02,135 DEBUG - viaplugin_proto_isakmp:isakmp_connect:1675 
2021-12-22 11:57:02,135 INFO  - viaplugin_proto_isakmp:isakmp_connect:1694 IKE_initServer AUTH_TYPE_PSK
2021-12-22 11:57:02,135 DEBUG - viaplugin_proto_isakmp:isakmp_connect:1753 GateWay ip xxx.xxx.xxx.xxx
2021-12-22 11:57:02,135 INFO  - viaplugin_proto_isakmp:ikeGetHostAddr:2415 ikeGetHostAddr 10.65.0.210 , family 2
2021-12-22 11:57:02,135 INFO  - viaplugin_proto_isakmp:ikeGetHostAddr:2415 ikeGetHostAddr 10.65.0.210 , family 2
2021-12-22 11:57:02,135 DEBUG - viaplugin_proto_isakmp:IKE_CUSTOM_getTranform:288 OAKLEY_ENCRYPTION_ALGORITHM 0
2021-12-22 11:57:02,135 DEBUG - viaplugin_proto_isakmp:IKE_CUSTOM_getTranform:288 OAKLEY_ENCRYPTION_ALGORITHM 0
2021-12-22 11:57:02,135 DEBUG - viaplugin_proto_isakmp:IKE_CUSTOM_getTranform:288 OAKLEY_ENCRYPTION_ALGORITHM 0
2021-12-22 11:57:02,135 DEBUG - viaplugin_proto_isakmp:IKE_CUSTOM_getTranform:288 OAKLEY_ENCRYPTION_ALGORITHM 0
2021-12-22 11:57:02,135 INFO  - viaplugin_proto_isakmp:ikestat_cbh:2430  ikestat_cbh cat = 3 ISC_MOB 2
2021-12-22 11:57:02,135 ERROR - viaplugin_proto_isakmp:ikestat_cbh:2464  status = VIA_ERROR_IKESA_FAILED using [v1 I] (id=0x3d5d9c2b)
2021-12-22 11:57:02,135 ERROR - viaplugin_proto_isakmp:ikestat_cbh:2467  status = VIA_ERROR_IKESA_FAILED reason = -8965
2021-12-22 11:57:02,135 ERROR - viaplugin_proto_isakmp:send_error_msg_ui:2085  send_error_msg_ui: VIAErrorCode  0 MError--8965
2021-12-22 11:57:02,135 INFO  - ArubaNEMain:setDisconnectStatus:749 setDisconnectStatus Error code 0
2021-12-22 11:57:02,136 DEBUG - ConstantUtils:ANDebugPrintInSwift:27 sendTunnelDisconnectStatusToUI called Error Code = 0
2021-12-22 11:57:02,140 DEBUG - ConstantUtils:ANDebugPrintInSwift:27 sent Tunnel Disconnect Reason to UI
2021-12-22 11:57:02,140 DEBUG - ConstantUtils:ANDebugPrintInSwift:27 Closing PacketTunnelProvider Connection​


    ------------------------------
    Sven Dregorius
    ------------------------------

    Original Message


  • 4.  RE: VIA 4.3.0 for iOS stopped working

    Posted Dec 28, 2021 11:08 AM
    Same here on both iPhone and iPad (iOS 15.1 on both ).
    The VIA clients was automatically upgraded from 4.2 to 4.3 a week ago and just disconnects immediately on connection. Looking fwd to next, tested, version.
    /Bjarne

    ------------------------------
    Bjarne Ingelsson
    ------------------------------

    Original Message


  • 5.  RE: VIA 4.3.0 for iOS stopped working

    Posted Jan 10, 2022 03:18 AM
    TAC is working on it.

    ------------------------------
    Sven Dregorius
    ------------------------------

    Original Message


  • 6.  RE: VIA 4.3.0 for iOS stopped working
    Best Answer

    Posted Jan 12, 2022 04:14 AM

    Got an answer with a workaround/solution from TAC/Engg-Team.
    It seems like there is a issue with 3DES and iOS/VIA4.3.0. Changing the IKE Policy to something with AES works for me.

    Navigate to Authentication -> L3 Authentication -> VIA Connection -> Select the profile -> VIA IKE policy -> Select a policy with AES.


    ​​

    ------------------------------
    Sven Dregorius
    ------------------------------

    Original Message


  • 7.  RE: VIA 4.3.0 for iOS stopped working

    Posted Apr 25, 2022 10:48 AM

    thank you so much.

    This instantly solved our problem, using the:
    IKE policy



    ------------------------------
    William Bauer
    ------------------------------

    Original Message