Re: [FW1] Securemote issue

["Dan Snyder" <dansnyder22@FW1-NOSPAMhotmail.com>]

are these workstations that are used in the office as well as remote use?
if you are sure that the encryption domain has been verified correctly, make
sure that the workstation doesn't have an address, of the network you are
trying to attach to, assigned to the nic. if so release it unless it is
win2000 workstation
----- Original Message -----
From: "Robert MacDonald" <rmacdonald@gfs.com>
To: <fw-1-mailinglist@lists.us.checkpoint.com>; <idan@xpert.com>
Sent: Monday, November 20, 2000 8:11 AM
Subject: Re: [FW1] Securemote issue


>
> Idan,
>
> Assuming(ack) that you have the excryption domain
> defined properly, it sounds like you don't have
> a rule to allow IKE or FWZ.
>
> Your firewall object should have either of these
> checked. What does the remote clients' user.C
> look like? Does it include the correct systems?
>
> By any chance, do you have a local NIC defined
> on the client? If so, that also may be your problem.
>
> What rule was associated with the decrypt log entry?
> Are you sure there wasn't any other log entries. Do
> you have a sniffer available to you?
>
> Robert
>
> - -
> Robert P. MacDonald, Network Engineer
> Team Lead, e-Business Infrastructure
> G o r d o n   F o o d    S e r v i c e
> Voice:email: rmacdonald@gfs.com
>
> >>> Idan Dolev <idan@xpert.com> 11/19/00 11:15:14 AM >>>
> >
> >Hi guys,
> >
> >Has anybody encountered a problem with securemote where you get
> >authenticated by the firewall but still no communication with the
internal
> >lan.
> >
> >I already checked the encryption domain, rewrote the rule, anti-spoofing
> >checked, the user was checked, fwz and IKE had the same behavior.
> >
> >I could see in the event log a decrypt connection to my client be still
no
> >data shown on my client.
> >
> >The firewall is 4.1 sp2 on NT,
> >
> >Any comments before I break down and cry......
> >
> >Idan
>
>
>
>
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================