Re: [FW-1] SecurID

[Onie Camara <neil@FW1-NOSPAMRESTRICTED.DYNDNS.ORG>]

Since you guys are metioning about FP1, do I have to install hotfix since I
only have FP1 on nokia ip330?

Thanks.


----- Original Message -----
From: "Mike Semaniuk" <mikie@KWAZE.COM>
To: <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
Sent: Wednesday, February 27, 2002 8:23 AM
Subject: Re: [FW-1] SecurID


> Don,
>
> What you are trying to do is unsupported in a Nokia environment.  If you
> want to use SecurID with NG FP1 on a Nokia, you will have to use it as a
> RADIUS server.  I've been told to expect it to be resolved in either FP2
or
> FP3...
>
> -Mike
> ----- Original Message -----
> From: "Don" <don@BLACKSUN.ORG>
> To: <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
> Sent: Wednesday, February 27, 2002 12:25 AM
> Subject: [FW-1] SecurID
>
>
> > Nokia IP 330
> > IPSO 3.4.2
> >
> > CP NG FP1
> > EMC + Module
> >
> > ACE Server 4.x
> >
> > When I attempt to use SecurID Authentication, fwssd core dumps on me.
> >
> > If I client auth with a username and password everything works fine.
> > If I attempt to use a user with SecurID defined, then the connection
hangs
> > and fwssd core dumps.
> >
> > I configured the ACE server with the firewall as a client, with the
> > hostname configured to match on both systems with the primary IP
matching
> > on both sides. I configured the secondary nodes for the other interfaces
> > on the firewall. I configured users on the client and set the encryption
> > for DES. I then copied sdconf.rec from c:\ace\data into /var/ace on the
> > IPSO box. After attempting an authentication from the firewall (and the
> > subsequent fwssd core dump) there is still no node secret exchange.
> >
> > The rule set allows all communications between the firewall and the ACE
> > server.
> >
> > This ACE server works. It is being used by a dial in server now.
> >
> > Does SecurID 4.x work with NG FP-1?
> >
> > Any help would be appreciated.
> >
> > -Don
> >
> > =================================================
> > To set vacation, Out Of Office, or away messages,
> > send an email to LISTSERV@lists.us.checkpoint.com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > fw-1-owner@ts.checkpoint.com
> > =================================================
> >
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================