EX SSL-VPN: Java 7 Update 51 or later shows security warnings may block agents on client machines t

03/26/2020 3 11853

DESCRIPTION:
EX SSL-VPN: Java 7 Update 51 or later shows security warnings may block agents on client machines to load

RESOLUTION:

Problem Definition:

With the latest Java 7 update 51 , end users might be blocked while logging into Aventail Workplace or accessing resources. Java has made more changes across multiple components, hence it is affecting our workplace provisioning process. The newer firmware versions 10.6.4 or later have not been affected with this release.

All Java based jar files (applets) are digitally signed which are deployed during installation.

Issues noticed:

-Fail to load agents.
-EPC checks failing.
-Access to Network based file shares failing.
-Failing to access RDP based shotcuts.

As a workaround for end users reporting issues related to faling of agents or access issues below work around is suggested.

Lauch

Step 1: Launch Java from Control Panel to make below changes:



Note: Lowering of security level from High to Medium would be an option to be considered.

Step 2:



Step 3:

Add the Url of workplace to the exception list.





Java Updates 55 & higher

With the latest Java update 55, the above Security Exception workaround would fail as Oracle changed their "allowable-codebase" list again. Our engineering team is working on this issue for further resolution. For more details, pelase contact SonicWall Support.


Tracking ID: 141179,141188, 145061