Re: Oggetto: Re: [FW1] Securemote: authentication downloading siteinfo

[CryptoTech <cryptotech@FW1-NOSPAMgmx.de>]

Juan,
Sorry to burst your bubble, but you cannot download topology using a userid and its
hybrid mode password, it MUST be a shared secret key, or as you have intoned, a full
blown PKI integrated system.

So if you have gotten this hybrid mode ike to work for topology download in 4.1, please
let me know, as I consider myself also fairly knowledgable about Check Point products
and I have not yet accomplished this.

Cheers,
CryptoTech

Juan Concepcion wrote:

> It does work in 4.1.
>
> -juan
>
> On Wed, 21 Feb 2001, CryptoTech wrote:
> > Not in 4.1, but I've heard rumors that this is gonna get fixed.
> >
> > CryptoTech
> >
> > Ian Campbell wrote:
> >
> > > Is there any way of getting this to work with hybrid (ie. RADIUS) auth?
> > > Thanks,
> > >
> > > Ian
> > >
> > > -----Original Message-----
> > > From: CryptoTech [mailto:cryptotech@gmx.de]
> > > Sent: Wednesday, February 21, 2001 9:32 AM
> > > To: sfranchini@cdmtc.it
> > > Cc: fw-1-mailinglist@lists.us.checkpoint.com
> > > Subject: Re: Oggetto: Re: [FW1] Securemote: authentication downloading
> > > siteinfo
> > >
> > > As the authentication will now be transferred in an SSL tunnel, there must
> > > be IKE
> > > and a shared secret password.
> > >
> > > CT
> > >
> > > sfranchini@cdmtc.it wrote:
> > >
> > > > Good.
> > > > Anyway, what is required to the User  doing a Site Info download ? His
> > > > Authentication Info based on the Encryption scheme I have set (IKE or FWZ)
> > > ?
> > > > Regards.
> > > >
> > > > CryptoTech <cryptotech@gmx.de> il 21/02/2001 14.52.11
> > > >
> > > > Rispondere, prego a cryptotech@gmx.de
> > > >
> > > > Per:  Stefano Franchini/CDM Tecnoconsulting@CDM Tecnoconsulting
> > > > cc:   fw-1-mailinglist@lists.us.checkpoint.com
> > > > Oggetto:  Re: [FW1] Securemote: authentication downloading site info
> > > >
> > > > Click Policy->Properties->Desktop Security->Respond to Unauthenticated
> > > cleartext
> > > > topology requests.
> > > >
> > > > Uncheck the box.
> > > >
> > > > CT
> > > >
> > > > sfranchini@cdmtc.it wrote:
> > > >
> > > > > Hi,
> > > > >  how can I require authentication to a Securemore 4.1 client downloading
> > > for
> > > > THE
> > > > > FIRST TIME my site information ? I can't understand why now it happens
> > > just so
> > > > > easily. Maybe I have something misconfigured on the Firewall Properties.
> > > > Thanks.
> > > > > Regards,
> > > > >  Stefano.
> > > > >
> > > > >
> > > >
> > > ============================================================================
> > > ====
> > > > >      To unsubscribe from this mailing list, please see the instructions
> > > at
> > > > >                http://www.checkpoint.com/services/mailing.html
> > > > >
> > > >
> > > ============================================================================
> > > ====
> > >
> > > ============================================================================
> > > ====
> > >      To unsubscribe from this mailing list, please see the instructions at
> > >                http://www.checkpoint.com/services/mailing.html
> > > ============================================================================
> > > ====
> > >
> > > ================================================================================
> > >      To unsubscribe from this mailing list, please see the instructions at
> > >                http://www.checkpoint.com/services/mailing.html
> > > ================================================================================
> >
> >
> >
> > ================================================================================
> >      To unsubscribe from this mailing list, please see the instructions at
> >                http://www.checkpoint.com/services/mailing.html
> > ================================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================