Re: [FW1] SecuRemote Problem

[CryptoTech <cryptotech@FW1-NOSPAMgmx.de>]

David,
After you created the properly formatted dnsinfo.C file, did you modify the
Crypt.def file and then install policy, and then restart the management server
(fwstop <cr> fwstart <cr>)?

If you cannot load policy from the management server, chances are you are using
authenticated topology download.  In that case, the above procedure will apply for
both modules.

Cheers,
CryptoTech

David Crousset wrote:

> Hi,
>
> I think I've found what is my VPN/DNS problem. I have a 2-nodes firewall in
> a cluster and 1 management station. I've created an object containing the 2
> firewalls and assigned an external IP to this object. My management station
> also has an external IP. When I create the site in SecuRemote, I use the IP
> of the cluster. So I assumed that the topology is downloaded from one of the
> 2 firewalls. I've edited the dnsinfo.C file on the management station. So
> when the client connect to the site, it doesn't get the info in the
> dnsinfo.C file. Do I have to put this file on the 2 firewalls?? I've tried
> to create a site with the IP of the management station. Didn't work..
>
> Thanks
>
> -----------------------
> David Crousset
> Network Administrator
> Tariffic.com
>> David@tariffic.com
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>               http://www.checkpoint.com/services/mailing.html
> ================================================================================




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================