RE: [FW1] Securemote Issue....

["Collins, Helen" <helen.collins@FW1-NOSPAMlaytons.com>]

Private & Confidential. Please conduct appropriate routine virus checks.
________________________________________________________________________

  
Hi all
 
We've had the same problem.  The way we got around this was by either
creating a new hardware profile or removing the IP configuration when using
SecuRemote.  

Helen Collins 
LAYTONS, Solicitors 
Carmelite, 50 Victoria Embankment, Blackfriars, London  EC4Y 0LS 
Tel: +44 (0)20 7842 8000, Fax: +44 (0)20 7842 8080, Mobile: 0421 511493 
Email: helen.collins@laytons.com, 
Visit our Website at http://www.laytons.com <http://www.laytons.com/>  


 
 -----Original Message-----
From: steve [mailto:smoran@stshotelnet.com]
Sent: 12 October 2000 16:19
To: Dan Hitchcock
Cc: 'GibsonB@gruntal.com'; amit@hclcomnet.co.in;
fw-1-mailinglist@lists.us.checkpoint.com
Subject: Re: [FW1] Securemote Issue....



I've seen this with various vpn products and in my case its always been the
nic, pop the nic and that has always worked for me.  Try doing a tracroute
on the laptop while at home and see which adapter its using. 

Dan Hitchcock wrote: 


 If the machine already has an address bound to any of its adapters that is
inside the encryption domain (as would be the case in the "take the PC home"
scenario, SecuRemote will never prompt for authentication at all, as it will
assume that encryption is not required.  Amit, can you ping anything on the
internal network from the SR client by IP address?  If so, your issue may be
name resolution.  If not, maybe Gibson is right, and this is new behavior in
the latest versions of SR. 

Dan Hitchcock 
CCNA, MCSE 
Network Engineer 
Xylo, Inc. (formerly employeesavings.com)The work/life solution for corporate thought leaders 



-----Original Message----- 
From: GibsonB@gruntal.com [ mailto:GibsonB@gruntal.com
<mailto:GibsonB@gruntal.com> ] 
Sent: Wednesday, September 27, 2000 5:58 AM 
To: amit@hclcomnet.co.in; fw-1-mailinglist@lists.us.checkpoint.com 
Subject: RE: [FW1] Securemote Issue.... 
 
I would suggest that you either make sure that SecuRemote is bound only to
dial-up adapters or release the IP address from the NIC when you bring the
machine home. 

> -----Original Message----- 
> From: Amit Saha [ mailto:amit@hclcomnet.co.in
<mailto:amit@hclcomnet.co.in> ] 
> Sent: Wednesday, September 27, 2000 6:52 AM 
> To: Fw-1-Mailinglist (E-mail) 
> Subject: [FW1] Securemote Issue.... 
> 
> 
> 
> Hello All, 
> 
> we have Checkpoint 4.1 SP1 and we are using securemote to 
> connect to our 
> internal LAN via internet. However, there are some laptops 
> which are used in 
> office as well as home. I have bound the securemote to the 
> dial-up adapter. 
> (OS is windows 98). When i am using the laptop in the office, 
> i am able to 
> connect to Internal network thru lan card which is fine. Now, 
> i take the 
> laptop to my house and i connect to internet. Then i try to 
> connect to my 
> web intranet server, securemote pops up the auth screen. 
> However, after 
> successful authentication, i am not able to connect to the 
> site. I believe, 
> its still trying to got thru the lan card to connect to the 
> intranet web 
> server. Can somebody help me with this, as to whether its a problem to 
> securemote configuration. 
> 
> Warm Regards, 
> 
> Amit Saha 
> 
> 
> 
> ============================================================== 
> ================== 
>      To unsubscribe from this mailing list, please see the 
> instructions at 
>                http://www.checkpoint.com/services/mailing.html
<http://www.checkpoint.com/services/mailing.html>  
> ============================================================== 
> ================== 
> 
  


*********************************************************************** 
Gruntal & Co., L.L.C.'s e-mail system is for business purposes only. 
Messages are not confidential. All e-mail may be reviewed by 
authorized supervisors, compliance or internal audit personnel. 
E-mail will be archived for at least three years and may be produced 
to regulatory agencies or others with a legal right to access such 
information. Gruntal will not accept trade order instructions via 
e-mail. Please telephone your Account Executive to place trade orders. 


Gruntal & Co., L.L.C. 
***********************************************************************


___________________________________________________________________________________________

This email and any attachments are sent in confidence, subject to applicable legal privilege and upon the basis that the recipient will conduct appropriate virus checks.  If you receive this email in error, please telephone us upon receipt: you are strictly prohibited from using, copying or disseminating it or any information contained in it save to the intended recipient.  Internet communications are not secure and Laytons is not responsible for their abuse by third parties, nor for any alteration or corruption in transmission, nor for any damage or loss caused by any virus or other defect.  A list of partners can be inspected at the above address.


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================