[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1]
Yes, we upgraded from from 4.0 to 4.1 and yes, the firewall is configured to export its own VPN encrytion domain to the SR client. I have captured the IKE log from the SR client, from there we can see the first successfull MainMode and QuickMode negotiation, and every few minutes it will try QuickMode negotiation. The first few QuickMode negotiations work, but after a while it will start failing at the first packet of QUickmode negotiation, it just keep failing even it tried to restart the negotiation from MainMode negotiation. How do you managed to find out that it is trying to do IKE Quickmode with a non official address? running ethereal on the SR client? THanks regards Thomas -----Original Message----- From: Hartmann, Josef [SMTP:[email protected]] Sent: Wednesday, August 22, 2001 3:03 PM To: 'Thomas Leong' Subject: RE: [FW1] Hi, we are having the same problems depending on the setup of the site objekt. Is your firewall objekt configured to the VPN IP address in the workstation properties tab? Moreover you could try running ethereal or any other sniffer and you will see what securemote is trying to do. We figured out that it has been trying to do IKE Quickmode to a non official ip address. Have you upgraded CP4.1 from 4.0 or are you running a clean installation? Regards, Josef > -----Original Message----- > From: Thomas Leong [mailto:[email protected]] > Sent: Tuesday, August 21, 2001 3:35 AM > To: [email protected] > Subject: RE: [FW1] > > > > Hi > > Does anyone having this "<firewall> communication error" while using > SecureRemote? We are using SecureRemote SP4 (with entrust > authentication) > and Firewall/VPN-1 ver 4.1 SP3. We have no problem creating the site, > after working for about 5-15mins, this error will pop up. Our user are > using NT drive mapping, telnet and HTTP intranet browsing, > and every time > this error appear, it will render the lost of NT drive > mapping, and it is > a pain in the as*. SOmetimes, it can recover the drive mapping but > sometimes it just poping the error message. The only way to > resolve this > is to kill secure remote and reconnect again. So can any one help? > > Any help appreciated. > > regards > Thomas > > > > > > ============================================================== > ================== > To unsubscribe from this mailing list, please see the > instructions at > http://www.checkpoint.com/services/mailing.html > ============================================================== > ================== > ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|