[FW-1] IPSEC Connection to Nortel Extranet Firewall

[Sean Donaghey/HDGH <SDonaghey@FW1-NOSPAMHDGH.ORG>]

Hi,

I have a vendor that is currently in-house, and wants too connect to his
server that is behind a Nortel firewall.  He is curently using the Nortel
Extranet client.  I have created a bidirectional rule from his computer to
his server with @Any services (for testing).  I see an IKE connection to
his server, but his client does not get a reply back from the server.  We
use Hide-NAT for the internal network, and after so digging in the
archives, it looks like there might be an issue with Hide-NAT and Nortel.

This vendor states that he can access this server from behind a Linksys
Cable router, but me thinks that Firewall-1 Hide-NAT, and Linksys's NAT are
a little different, so that is may be why it works.

Does anyone have any ideas on how to get this to work?

My FW config is: Firewall-1 v4.1 SP3 on a Nokia IP440 with IPSO 3.2.1

Thanks,

Sean P. Donaghey
Sr. Technical Analyst
Hôtel-Dieu Grace Hospital
Windsor, Ontario Canada

Tel:Ext. 3717
Fax:Email: sdonaghey@hdgh.org

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================