[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] FW: XP SecureRemote setup?
I DO have SR working on XP. I'm using IKE, SHA1, 3DES. I have noticed that sometimes I need to manually start SR... In other words, the goofy envelope icon isn't always present (this seems to almost always be true after a suspend/hibernate and restart of the laptop). Since you're getting desperate, let me ask all the "obvious" questions: 1) Which version of SR are you installing on XP. The version that actually WORKS with XP was only released in the last month or two. It says it supports XP in the Release notes (I can get the version number if you need it, but I don't have it in front of me). 2) Sorry, but I have to ask: When you installed SR, you DID install it on ALL interfaces, right? It's not entirely clear to me that SR can really tell what's a dial-up and what's something else. 3) This is JUST SR, right? Not, SR with eToken, or SR with some other authentication, smart-card, get clever, add on? 4) If you install SR with "desktop policy" support, can you logon to the policy server (right click the goofy envelope icon, and "logon"?) Any of that help? Or is that all too obvious? Peter > -----Original Message----- > From: Sipp, Jay [mailto:[email protected]] > Sent: Thursday, January 10, 2002 1:09 PM > To: [email protected] > Subject: [FW-1] FW: XP SecureRemote setup? > > > Anymore help available???? > > I've been trying to get an XP laptop to authenticate w/secure > remote. Specifics below. I've made some progress by changing > the encryption method to FWZ (?), where I now get a challenge > from the firewall every time I try to get in the network. > However, now the client says it's exchanging keys with the > firewall (never seen that on 9x or 2k's), and then it errors > out saying "Error: no answer received from firewall at site > "my.domain".com. If this problem persists, contact your > system administrator." > > Any ideas? > Thanks all, > > Jay > > > > -----Original Message----- > > From: Sipp, Jay > > Sent: Monday, December 31, 2001 1:38 PM > > To: '[email protected]' > > Subject: XP SecureRemote setup? > > > > I'm sending this call to arms out once again in hopes that someone > > will recognize these symptoms...... > > > > Essentially, either XP secure remote client onto the laptop > described > > below will be challenged and then successfully authenticate to the > > firewall ONLY ONCE. Then, nada. I can't even ping the firewall on > > successive tries. It will, however, re-initialize (or > update the site > > profile) successfully with the firewall, as viewed on the log. > > > > Any help is appreciated. > > > > Jay Sipp > > > > Happy 2002! > > > > > > > > > > Orig message: > > > > > > Hi all - HELP! > > > > All my experience w/Secure remote has been positive. Install it, > > setup w/server, etc. & your good to go, with the dial in client > > seeking a verification with the firewall EVERY TIME IT > CONNECTS TO THE > > INTERNET. This is good. Typically, my users want to > authenticate when > > they log on, either from their lappers or home PC. If they > don't want > > to come into our network, then they just kill the client, etc. > > > > My problem today is my VP got a honking new VAIO laptop, running XP > > (teletubbie land), and I can't get the SecureRemote client to "call > > out" for authentication when he connects to the internet > via dial up. > > I tried to ping an internal server, and that generated a challenge > > from the firewall, but that only worked ONCE. What am I missing? > > Thanks in advance, > > > > Jay > > > > Specifics: > > PIII laptop w/XP pro dialing out on internal 56k modem > standard dial > > up to RCN, w/hard coded DNS and WINS SecureRemote client for xp 4.1 > > sp5 > > > > > > > > John M. Sipp Jr., MCSE > > LAN Administrator > > Service Credit Union > > [email protected] > > > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.htm> l > > ================================================= > If you > have any questions on how to change your > subscription options, email > [email protected] > ================================================= > ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|