Re: Réf. : Re: [FW1] VPN Server

[CryptoTech <cryptotech@FW1-NOSPAMgmx.de>]

Dany,
The problem here is that you have:
1) a separate managment module and firewall module, or
2) not created an FWZ key on your management module
AND
Under policy->properties->desktop security you have checked to allow
unauthenticated cleartext topology requests.

Options, go to the firewall object, select the vpn tab, check fwz and create an
fwz key and a dh key.  Reinstall policy, or
if the firewall module and management module are on separate boxes, you must
deselect the unauthenticated cleartext topology requests.  This will require
users to use an IKE password to download topology.

Cheers,
CT

Dany_Grenier@Logibec.com wrote:

> Do I need to create a Certificate Authority server to be able to use
> Securemote ?
>
> Because when I try to establish a Securemote connection I always have an
> error.  See attach file.
>
> Thank's
>
> (See attached file: Securemote.bmp)
>
> CryptoTech <cryptotech@gmx.de> le 03/27/2001 07:09:10 PM
>
> Veuillez répondre à cryptotech@gmx.de
>
>
>
>  Pour  Dany Grenier/Logibec/CA
>  :
>
>  cc :  fw-1-mailinglist@lists.us.checkpoint.com
>
>
>
>  Objet Re: [FW1] VPN Server
>  :
>
>
>   ------------------------------------------------------------------------
>
> try
> http://support.checkpoint.com/kb/docs/public/firewall1/4_1/zip/vpn-1-with-c
> ontivity.zip
>
> you don't have to pay attention to the contivity stuff.  There is
> sufficient info to
> see how it is done.  If all else fails, follow Tim's advice
>
> Regards,
> CryptoTech
>
> Dany_Grenier@Logibec.com wrote:
>
> > Hi!
> >
> > I'm new with Checkpoint and I must setup a VPN server.  Can you tell me
> > where can I find a good documentation with samples to how setup a VPN
> > server ?
> >
> > Thank's
> >
> >
> ===========================================================================
> =====
> >      To unsubscribe from this mailing list, please see the instructions
> at
> >                http://www.checkpoint.com/services/mailing.html
> >
> ===========================================================================
> =====
>
>   ------------------------------------------------------------------------
>                 Name: smime.p7s
>    smime.p7s    Type: PKCS #7 Signature (application/pkcs7-signature)
>             Encoding: base64
>
>                         Name: Securemote.bmp
>    Securemote.bmp       Type: Windows Bitmap (image/x-MS-bmp)
>                     Encoding: base64
>                  Description: Windows Bitmap



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================