Got it
Huawei Enterprise Support Community
Community Forums Security
‘Network Extension’ tab...

‘Network Extension’ tab does not display

Created: Jul 28, 2021 06:43:25Latest reply: Jul 29, 2021 03:25:41 247 6 0 0 0
  Rewarded HiCoins： 5 (problem resolved)
View the author 1#

Hello，I am facing 2 problems:

1. When we try to access SSL VPN using Chrome browser ot Firefox, the 'Network Extension' tab not display, but it works when using IE. I also can logging in using SecoClient. Please advise if there any solution available.

Device: USG6655E, V600R007C20SPC100. I also uploaded corresponding clientpatchmain to FW.

2. On other v-gateway, certificate authentication is configured. I can logging in using secoclient but when i try with browser below error found.

for all browser

Device: USG6655E, V600R007C20SPC100.


Like (0) Dislike (0) Favorite(0) Share Report
Previous: Introduction to Advanced Persistent Threat
Next: Huawei USG6370 firewall
Featured Answers

Recommended answer

(0) (0)
chenhui
Admin Created Jul 29, 2021 03:25:41

Hi,
To enable users to access network extension services through the Firefox, Chrome browser, the network administrator needs to upload the SecoClient software on the System > VPN Client Upgrade page of the FW web UI. In addition, only the network extension services can be configured on the virtual gateway of the FW. The certificate authentication mode cannot be configured there.
When the preceding conditions are met and if a user accesses the virtual gateway login page through a browser, the system prompts the user to download and install the SecoClient software. In V600R007C00 and later versions, the device supports access to the virtual gateway login page through Chrome (42 or later) or Firefox (52 or later). In this case, you need to install the corresponding extension plug-in as prompted and install SecoClient 7.0.2 or later. After the SecoClient software is installed, the user can access network extension services after refreshing the login page. If the current operating system of the user does not support the installation of the SecoClient software, the user cannot access network extension services through the Firefox, Chrome browser.
Besides, if the error consists while using the IE browser, please make sure you are using the IE 6/7/8/9/10/11.

2. On other v-gateway, certificate authentication is configured. I can logging in using secoclient but when i try with browser below error found.

====== What kind of certificate authentication method do you configure? Certificate-anonymous authentication or certificate-challenge authentication? And have you uploaded the valid CA certificate into the firewall already, the valid client certificate into the remote login terminals?

View more
  • x
  • convention：

AlSafy
AlSafy Created Jul 29, 2021 13:35:24 (0) (0)
Hi, i have configured certificate-challenge authentication. in same PC when i am using secoclient sectificate authentication is working and user can log in, but when I am trying with browser above error arrived.  
chenhui
chenhui Reply AlSafy  Created Jul 31, 2021 02:54:16 (0) (0)
What is your browser and version?  
All Answers
(0) (0)
2#
DDSN
DDSN Admin Created Jul 28, 2021 06:46:48

Hi AlSafy,
Please wait patiently. Our engineers are looking for answers to your questions.
View more
  • x
  • convention：
(0) (0)
3#
DDSN
DDSN Admin Created Jul 28, 2021 07:44:25

Hi AlSafy,
For Q1, SSL VPN provides web proxy, file sharing, port forwarding, and network extension features. The web proxy consists of web rewriting and web-link. The web-link, port forwarding, and network extension features depend on client controls. These features are available only after client controls are installed on browsers. The web rewriting and file sharing features do not depend on client controls and can be used on browsers.
Currently, SSL VPN client controls can be loaded only on the Internet Explorer kernel browser (used in multi-core browser compatibility mode). Therefore, if non-Internet Explorer kernel browsers (such as Firefox or Chrome) are used to log in to the SSL VPN, only web rewriting and file sharing resources are displayed, and network extension resources are not displayed. You can refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1000179233&id=EN-US_TOPIC_0104548183&lang=en
For Q2, Are there any other tips?
View more
  • x
  • convention：

AlSafy
AlSafy Created Jul 28, 2021 07:54:51 (0) (0)
yes please, this error appears in all browser even in IE.  
(0) (0)
4#
chenhui
chenhui Admin Created Jul 29, 2021 03:25:41

Hi,
To enable users to access network extension services through the Firefox, Chrome browser, the network administrator needs to upload the SecoClient software on the System > VPN Client Upgrade page of the FW web UI. In addition, only the network extension services can be configured on the virtual gateway of the FW. The certificate authentication mode cannot be configured there.
When the preceding conditions are met and if a user accesses the virtual gateway login page through a browser, the system prompts the user to download and install the SecoClient software. In V600R007C00 and later versions, the device supports access to the virtual gateway login page through Chrome (42 or later) or Firefox (52 or later). In this case, you need to install the corresponding extension plug-in as prompted and install SecoClient 7.0.2 or later. After the SecoClient software is installed, the user can access network extension services after refreshing the login page. If the current operating system of the user does not support the installation of the SecoClient software, the user cannot access network extension services through the Firefox, Chrome browser.
Besides, if the error consists while using the IE browser, please make sure you are using the IE 6/7/8/9/10/11.

2. On other v-gateway, certificate authentication is configured. I can logging in using secoclient but when i try with browser below error found.

====== What kind of certificate authentication method do you configure? Certificate-anonymous authentication or certificate-challenge authentication? And have you uploaded the valid CA certificate into the firewall already, the valid client certificate into the remote login terminals?

View more
  • x
  • convention：

AlSafy
AlSafy Created Jul 29, 2021 13:35:24 (0) (0)
Hi, i have configured certificate-challenge authentication. in same PC when i am using secoclient sectificate authentication is working and user can log in, but when I am trying with browser above error arrived.  
chenhui
chenhui Reply AlSafy  Created Jul 31, 2021 02:54:16 (0) (0)
What is your browser and version?  
Back to list

Comment

Advanced
B Color Image Link Quote Code Smilies
You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login
Huawei Website Support About Huawei Privacy User Agreement Terms of Use Cookies Cookie Settings
Huawei Enterprise Huawei Carrier Forum Training & Certification

Contact Us: e_online@huawei.com Copyright © 2022 Huawei Technologies Co., Ltd. All rights reserved.

APP

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.