[FW1] FW: Question about the whole SecuRemote/NAT Issue

[Jarrett Goetz <JGoetz@FW1-NOSPAMJenzabar.com>]

Does really no one know the answer to this straightforward question I posted the other day about what section something in the objects.C belongs in?

 

Thanks for all your times......

 

Jarrett

 

-----Original Message-----
From: Jarrett Goetz
Sent: Tuesday, September 05, 2000 14:43
To: 'fw-1-mailinglist@lists.us.checkpoint.com'
Subject: Question about the whole SecuRemote/NAT Issue
Importance: High

I have a quick question about a solution I have been reading in many places in relation to the dreaded and aggravating SecuRemote and NAT issue that many people are having.  In the following Phoneboy FAQ [http://www.phoneboy.com/fw1/faq/0141.htm], it talks about the :userc_NAT (true), :user_IKE_NAT (true), and for SecurRemote the :force_udp_encapsulation (true) variables.  These are very straightforward.  Then there is the other thing it says to add:

 

:isakmp.udpencapsulation (
        :resource (
                            :type (refobj)
                              :refname
                                           ("#_VPN1_IPSEC_encapsulation")
               )
                :active (true)

)

 

I have read in many places that it says to add it to the "gateway section" of the objects.C.  Would this mean the firewall object itself?  Or should it go somewhere else?

 

Can someone please tell me exactly where this should go?

 

Thanks all for your time.

 

Jarrett