Re: [FW1] Manual IPsec with CPFW-1 4.1 SP3

[ARNOR@FW1-NOSPAMejs.is]

Hi,

I found the following in the Nokia Knowledgebase, wich suggests that
this is correct, I'm very surprised that there is no mention of it on
the Checkpoint Knowledgebase. As a matter of fact Nokia has become my
first place to search if I have a Checkpoint (or Nokia) problem :

Resolution 5183  
Does FireWall-1 4.1 SP3 support Manual IPSEC?  
  
Check Point FireWall-1,   Site-to-Site VPN 
for version: 4.1 SP3  Only  
last update: 03/12/2001 12:53:55  

Nokia release notes for Check Point FireWall-1 4.1 SP3 state that Manual
IPSEC is not supported. 4.1 SP3 on other platforms makes no mention of
this. Also, there are other notes that refer to specific Manual IPSec
features, which makes this all the more confusing.  

SOLUTION  
After 4.1 SP3 was released for other platforms, but before it was
released on Nokia, Check Point noticed that Manual IPSEC didn't work.
They did not fix this in our version either, which is why our release
notes contain a note about this and theirs does not. We have obtained
the hotfix for this problem, which is a replacement for the fw binary.
Download the appropriate version for your encryption type:...(stuff
deleted)........

Regards,
Arnor Arnason
EJS
arnor@ejs.is
 

> Date: Tue, 8 May 2001 23:36:19 -0400
> From: "Aleksey Mikhaylov" <alelists@apmx.net>
> Subject: Re: [FW1] Manual IPsec with CPFW-1 4.1 SP3
> 
> Yes, we had a number of VPNs using Manual IPSEC and they all stopped
working
> after we deployed SP3.
> We didn't investigate further and migrated the VPNs to IKE.
> 
> - ----- Original Message -----
> From: "jonny robertson" <jonny@vixen.correspondence.school.nz>
> To: <fw-1-mailinglist@beethoven.us.checkpoint.com>
> Sent: Tuesday, May 08, 2001 7:47 PM
> Subject: [FW1] Manual IPsec with CPFW-1 4.1 SP3
> 
> 
> >
> > Can anyone else on this list confirm that there is a problem
> > with Manual IPSec in Checkpoint Firewall 4.1 with Service Pack 3?
> >
> > I haven't been able to make it work, and saw an article on the web a
> > few days ago hinting that it may be a known bug.
> >
> > Thanks,
> > -jonny
> >
> >
>
>


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================