Re: [FW-1] Question about VPN SecuRemote

[Jesus Calvo Hernandez <jesus.calvo@FW1-NOSPAMSEMA.ES>]

Hi

To properly define a user´s encryption properties you must go to the user
button (the one with the face) and then edit each user. You will see a tab
called encryption where you define which type of encryption you use for the
user (can be several types). So if you want ike, check ike and then
reinstall the user database. This will help you to solve your problem, the
error will not appear again.

Of course you must also:

On the securemote client you must go to tools, encryption --> check ike.

The firewall object itself must have checked the box ike for encryption

HTH

regards

Jesus Calvo


At 09:29 04/04/2002 -0500, you wrote:
> Hi all
>
> Please bear with me.  I am not knowledgeable at all, so if I don't provide
> enough information, then let me know what else you need.
>
> We had someone come in and change the encryption scheme on the firewall to
> use IKE.  We had to have everyone update their client to use VPN + Strong in
> order to authencate.  One of the reasons we did this is so people can use
> SecuRemote from behind a home router.  I was told the only thing I need to
> do is open the client and go to tools, encryption scheme, advanced and
> choose "Force UPD encapsulation".  When we do this, two people have gotten
> an error stating they are not defined to use IKE.  I check the encryption,
> the are set to use IKE.  When I get this error, the only thing I can do is
> to delete and recreate the site, reboot the computer and then I can have the
> people authencate - but never behind the home router.
>
> Can someone please point me in the direction of what to look for??
>
> Thanks for all your time and advice
>
> Russell
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================

Jesus Calvo
SchlumbergerSema Spain
Albarracin 25
28037-Madrid

------------------------------------------------------------------
This email is confidential and intended solely for the use of the individual to whom it is addressed. Any views or opinions presented are solely those of the author and do not necessarily represent those of SchlumbergerSema.
If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited.
------------------------------------------------------------------

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================