[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] SecuRemote through NAT device???
Russell and list, Fwz is an in-place encryption, which means the packet never changes, when you have an internal router most likely you doing nat, pqacket leaves firewall it has non-routable address.. I am only guessing but you probably just connect to dial-up for secureremote, which means you always have routable address.. When you use IKE it will wrap the packet in the firewall and send it out with a routable address, this is why you must use ike when dealing with nating on client side.. Stanley "Etts, Russell" wrote: > Hi there > > I was curious - why is IKE better? For some reason we can only use FWZ.... > on the client machines, we get an error stating that we cannot use IKE... > > Thanks > > Russell > > PS - Yes, I am new to this... > ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|