NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] SecuRemote through NAT device???



Russell and list,

Fwz is an in-place encryption, which means the packet never changes, when you
have an internal router most likely you doing nat, pqacket leaves firewall it
has non-routable address..
I am only guessing but you probably just connect to dial-up for secureremote,
which means you always have routable  address..
When you use IKE it will wrap the packet in the firewall and send it out with
a routable address,
this is why you must use ike when dealing with nating on client side..

Stanley



"Etts, Russell" wrote:

> Hi there
>
> I was curious - why is IKE better?  For some reason we can only use FWZ....
> on the client machines, we get an error stating that we cannot use IKE...
>
> Thanks
>
> Russell
>
> PS - Yes, I am new to this...
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.