Issue Summary

Users were connecting to a far gateway instead of connecting to local gateway which is closer to the user. 

Behavior observed

1. Client registration logs in Concerto dashboard showing the user successfully registered to the closest gateway. However, the IPSec tunnel from client is landing to a different gateway which is very far from the user location. 
2. User location [source country] and source IP address is showing correctly in the Secure Access Dashboard. 
3. The user is facing slowness as the data traffic is existing from a far gateway. 

 

Root cause and Troubleshooting steps performed

The issue was caused by corrupted or missing network sockets and outdated Network Adapter drivers, which prevented the SASE client connecting to an unexpected gateway. 

Steps performed to troubleshoot and resolve the issue:

• Reset the Windows network stack to resolve the corrupted network configurations using the following commands 

• • 1. netsh winsock reset
    2. netsh int ip reset
    3. ipconfig /flushdns

• Reinstall the WAN Miniport drivers to resolve issues caused by outdated network adapter drivers by following the steps below

 

• • 1. Open Device manager in client machine by right click the start button and select the device manager
    2. Expand the Network adapters
    3. Look for the adapters “WAN Miniport (IKEv2), WAN Miniport (IP), WAN Miniport(IPv6)” right click and uninstall
    4. Once uninstalled, click the Action menu at the top and select Scan for hardware changes to automatically reinstall the drivers

 

• Uninstall and reinstall the Versa SASE client in Administrator mode, then register and connect. This will establish the VPN tunnel and successfully connect to the closest gateway location.