> Source: [sk95970](https://support.checkpoint.com/results/sk/sk95970)

# sk95970 - Security Warning "This application will be blocked in a future Java security update" when SNX tries to connect

| Property | Value |
|----------|-------|
| Solution ID | sk95970 |
| Date Created | 2013-10-27 |
| Last Modified | 2015-08-20 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Windows |

## Symptoms

- * After upgrading Java on the client machine, when connecting with SSL Network eXtender (SNX), IPSec, or Mobile Access, the following Java Security Warning is displayed:   

  "`This application will be blocked in a future Java security update because the JAR file manifest does not`  
  `
  contain the Permissions attribute. Please contact the Publisher for more information.`"   

  ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk95970/sk95970_Java_Warning.png)   

* After upgrading Java on the client machine, when connecting with SSL Network extender (SNX), IPSec, or Mobile Access, the following Windows Security Warning is displayed:

  ```
  
  Application: UNKNOWN
  Publisher: Check Point Software Technologies Ltd.
  
  This web site is requesting access and control of the Java application shown above.
  ```

  ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk95970/sk95970_Windows_Warning.png)
* Debug of SSL Network Extender shows in *%Program Files%\\CheckPoint\\SSL Network Extender\\slimsvc.log* file:

  `WinSSL_Decrypt: DecryptMessage returned 80090330`

## Cause

* Symptom 1 and Symptom 2:

  In the future, Java will block use of applications that use an untrusted certificate, or if the Application/Publisher is "UNKNOWN".   

* Symptom 3:

  We read the maximum value we are allowed (100,000).  
  The issue happens because the buffer already contains some data from a previous transaction and we then try to put another 100,000 into which is over its limit.  
  This causes this data not to be added which results in us basically losing this data and then failing decryption since now the SSL flow is out of sync.  
  This issue should not be happening in newer versions of SNX since there we do not read the maximum value (100,000), but instead we read 100,000 - what is left in the buffer so this way this data will not be lost.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content