Stormshield SSLVPN Client

[vince86]

Good morning,

I set up the package as shown here: viewtopic.php?t=3276
(Version 3.2.2)

WAPT version: 2.4
license: company

Code: Select all

# -*- coding: utf-8 -*-
from setuphelpers import *

uninstallkey = []

# Defining variables
bin_name_string = 'Stormshield_SSLVPN_Client_%s_win10_fr_x64.msi'
vpn_server = 'vpn.xxx.xx' # Set default vpn server fqdn to connect to

def install():
    # Initializing variables
    package_version = control.get_software_version()
    bin_name = bin_name_string % package_version

    # Installing the package
    print('Installing %s' % bin_name)
    install_msi_if_needed(bin_name)
    killalltasks(control.impacted_process.split(",")) # Kill client process launched with system account
    create_programs_menu_shortcut('Stormshield SSL VPN Client','C:\Program Files\Stormshield\Stormshield SSL VPN Client\sslvpn_client.exe',wDir='C:\Program Files\Stormshield\Stormshield SSL VPN Client\\',folder='Stormshield SSL VPN Client')
    registry_set(HKEY_LOCAL_MACHINE,makepath('SOFTWARE','Microsoft','Windows','CurrentVersion','Run'),'stormshield-vpn','C:\Program Files\Stormshield\Stormshield SSL VPN Client\sslvpn_client.exe',type=REG_SZ)

def session_setup():
    # Initializing variables
    currentuser = os.getlogin()

    # Configuring user client default vpn server to connect to
    registry_set(HKEY_CURRENT_USER,r'Software\\STORMSHIELD\\STORMSHIELD SSL VPN CLIENT','address',vpn_server,type=REG_SZ)
    registry_set(HKEY_CURRENT_USER,r'Software\\STORMSHIELD\\STORMSHIELD SSL VPN CLIENT','automatic','true',type=REG_SZ)
    registry_set(HKEY_CURRENT_USER,r'Software\\STORMSHIELD\\STORMSHIELD SSL VPN CLIENT','username',currentuser,type=REG_SZ)

def uninstall():
    remove_programs_menu_folder('Stormshield SSL VPN Client')
    if reg_key_exists(HKEY_LOCAL_MACHINE,r'Software\Microsoft\Windows\CurrentVersion\run\stormshield-vpn'):
        run('reg delete "Software\Microsoft\Windows\CurrentVersion\run\stormshield-vpn" /f')

The installation/uninstallation works (fresh install) but not the VPN.
After entering my login details, I received the following message via the Windows notification center:

Disconnected.
The SSL VPN connection was interrupted during Windows sleep or hibernation.
Please reconnect.

Tested on Windows 10 and Windows 11.

Installed manually, I have no errors and I can connect properly.

Any ideas?
Do you have a working package?

[Gaelds]

Same problem on my machine. Manual installation worked fine too.

[dcardon]

Good morning,
The WAPT agent runs under the SYSTEM account. To test the installation manually, you must run the installer as the SYSTEM account. To do this, you can install the package https://store.wapt.fr/store/fr/tis-sysinternals-pstools Then run the following command (as a local admin) and you will then have a cmd.exe in which you can test the installation manually:

Code: Select all

psexec -i -s cmd.exe

Sincerely,
Denis

[olaplanche]

Hello,

I can confirm that I've also been experiencing a problem since version 3.2.2.
If I find a solution, I'll post it here.

[olaplanche]

Hello,

I think we'll need to migrate the installation to the session-setup function:

https://documentation.stormshield.eu/SN ... indows.htm

I don't think I'll be able to tackle it before next week. It's not complicated, though; there are already examples of this type in some packages on the wapt store.

[vince86]

Response from stormShield:

https://kb.stormshield.eu/en/network-se ... ient-3-2.x

/!\ This problem is currently under analysis, the R&D ticket is 85070, stay tuned.

[olaplanche]

Hello and thank you for your feedback.

Personally, I had already looked into that, but the workaround doesn't solve the problem for me.
Perhaps there's a problem with this particular version that will be fixed in the next one...

In any case, the idea of ​​using session-setup doesn't seem feasible to me because the official documentation clearly states that the client must be installed with the admin user account...

[vince86]

No issues with the latest version released by Stormshield (3.2.3).
For now, we're distributing via GPO. I've downloaded the tis package, which I'll test.
By the way, I have a question for the Wapt team:
Why was the tis package made private? Downloading the client isn't private at all from Stormshield.
To download the client: https://vpn.stormshield.eu/

[vcardon]

Hello vince86,

a growing number of packages will switch to a "restricted" mode.

The very simple objective is to encourage the adoption of the Enterprise version of WAPT, as organizations subscribing to the Enterprise version will be able to download packages from the store without restrictions.

[cbaziret]

No problems with the latest version released by Stormshield (3.2.3).
For now, we're distributing via GPO. I've downloaded the tis package, which I'll test.
By the way, I have a question for the Wapt team:
Why was the tis package made private? Downloading the client isn't private at all from Stormshield.
To download the client: https://vpn.stormshield.eu/

Hello vince86,

If you want to use the "tis-stormshield-vpn" package, be sure to use the latest version available on the store, which is version "3.2.3-5", previous versions will almost certainly not work.

Good day !