NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW1] securemote issue





Hi Laurent,

right now I´m facing the same Problem with W2k and SecuRemote SP3.

Do you see any "decrypt" log entries that indicate a successfull arrival of the
packets from the SecuRemote client? I guess not :-)
The strange thing is that it works on some other W2k Installations - but not on
two notebooks we have.
Right now I have our distributor to opne a case at checkpoint .

Just to compare: when you try to "re-bind" the interfaces, reboot your computer
and then try to connect again you get the error that no remote network objects
can e found where SecuRemote is bind to?

Regards,
Marco





Laurent Butti <[email protected]> am 09.05.2001 08:49:58

An:   [email protected]
Kopie:     (Blindkopie: Marco Rossi/asap)

Thema:    [FW1] securemote issue



Hi,

I have already posted this question, but I haven't found any solutions
yet.

I have successfully configured a FW1 4.1 SP3 on Solaris and a SecuRemote

SP3 client on W2000.

After configured the certificates in the gateway and for an user (CRL
field correctly filled) with CRL enabled with HTTP server (reachable
only be the Gateway over HTTP) in order to make Public Key
authentication with IKE/ISAKMP.

I have the following issue :
Authentication seems to be good because the following message on the FW
logs : " Authcrypt     Reason : User Authenticated by Firewall. Sending
Encrypted Topology Scheme : SSL"
And that's all, SecuRemote says : "communication with  has failed"

By watching the fwenc.log on SecuRemote the CRL seems to be correctly
downloaded from the gateway to SecuRemote client. And the logs on FW +
HTTP/CRL shows that the CRL has been correctly downloaded and
interpreted.

Does someone has informations about userc.c and dnsinfo.c files and
their formatting, i think i have problems with this.

Any idea ?

Thank You in advance.

Laurent Butti.




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================






 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.