NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW1] HA configuration



Am looking for anyone that has the following and would like to discuss:

FW1v4.1 sp3
Distributed management
StoneSoft's Full Cluster (or HA)
SecureClient VPN using 3DES encryption
SecureID ACE authentication
IP Nat Pools

The SecurId authentication works until we switch over to the secondary firewall
(HA configuration), then the ACE server sees the different unique heartbeat 
interface and will not accept it as the same ACE client.

We have not been able to get the nat pools to work correctly either.  The
SecureClient gets authenticated, gets assigned an IP from the nat pool, and
then establishes a tunnel but we are unable to do lookups or pings at that
point.  The docs say to use an invalid address range which I have added the
route to the workstations we are testing to/from but traffic is not being
returned.

Thanks,
Mike

[email protected]
TelFax================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.