[FW1] SecuRemote Connection Problems to FW-1 with Public External Interface

["Christian D. Anschuetz" <canschue@FW1-NOSPAMuptyme.com>]

Hello:

I have been unable to get SecuRemote to work with our firewall (version 4.0,
sp7 for NT).  Unfortunately, the problem is not one of the more common
configuration issues, but rather probably the result of the following
environment:

SR Client --- Internet ---- Router --- (Nat'd 1918 addr) --- FW

As you can see, the firewall's external address is actually an RFC 1918
address that is Nat'ed at the router (with a dedicated, non-shared public IP
address).  No filtering is taking place at the router at all (in fact,
telnetting to the SR ports succeeds no problem).

Problem manifests itself as:  Key exchange occurs; attempts to access
internal network causes prompt; after time-out the message "No response from
server - check user name and password"; NO LOG INFORMATION WHATSOEVER.

Any ideas?  I am stumped.

Many thanks in advance.

Christian



This is a repost - Never saw the message hit the list.  If you've seen this
before, my apologies and please disregard.



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================