Re: [FW1] partially overlapping enycryption domain

["Tim Holman" <tim_holman@FW1-NOSPAMhotmail.com>]

Is 'Exportable for SecuRemote' enabled on all clustered servers ?
Does the userc.C file actually get downloaded ?
There is limited checking of this file when it is downloading - invalid
entries mean the whole site that they belong to is removed before the file
is loaded.
Could you post the :topology section of the file up ?
Of course the error message could always be true, and there is some partial
overlap with your encryption domains.
Are there any multihomed hosts ?
Your encryption domain network group should also include the gateways, as
well as the networks they protect.

Tim

----- Original Message -----
From: <Joerg.Fritsch@tesion.de>
To: <fw-1-mailinglist@lists.us.checkpoint.com>
Sent: 27 March 2001 12:16
Subject: [FW1] partially overlapping enycryption domain


>
> I have a Stonebeat HA Cluster with a seperate management station. Both
> GatewayObjects are configured to use the same Network Object as encryption
> Domain. However, when SecuRemote tries a topology- download from the
> management console it says that the site xyz has at least two gateways
with
> a partially overlapping encryption domain.
>
> This is NOT true !! The encryption Domain is fully identical on both
> Gateways. Does anyone know how to fix this ?
>
> Joerg Fritsch
> Systemspezialist Internetdienste
>
> tesion ))  Telekommunikation
> Kriegsbergstr.11
> D-70174 Stuttgart
> Telefon:    +49 (0) 711 / 2021 - 793
> Telefax:    +49 (0) 711 / 2021 - 93 - 793
> E-Mail:     joerg.fritsch@tesion.de
>
>
>
>
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================