[FW1] Hybrid IKE auths fine but no connectivity to encryption domain?

[Jeff Newton <Jeff_Newton@FW1-NOSPAMpmc-sierra.com>]

Has anyone experienced the following:

- Win2K SR 4166 using hybrid IKE (Radius/SecurID) authenticates fine
- The firewall log shows the following:

scheme: IKE methods: Combined ESP: 3DES + SHA1 
scheme: IKE methods: Combined ESP: 3DES + SHA1 (phase 2 completion) 
for hosts:(src ip) and (dest ip)

- The firewall log shows proper encrypt/decrypt entries
- The destination workstation in the encryption domain sees traffic
from SR client and returns traffic
- The SR client reports cannot connect to dest ip and nothing in the
encryption domain is accessible.

All network traffic outside of the encryption domain works fine and
the SR client connects fine with FWZ encryption.

Anyone have any ideas?

Cheers,
 
----
Jeff Newton



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================