Re: [FW-1] Will SecureRemote work over an existing VPN?

[Matt Rossiter <matt@FW1-NOSPAMVERIO.NET>]

Title: Message

User behind firewall A is trying to establish a VPN to the firewall at location B so that he can access machines on the B network.  If Firewall A and B already have an established tunnel, is it possible for a client using SecureRemote on the A network to do this?  Basically it's a VPN within a VPN.

 

Matt

-----Original Message-----
From: Mailing list for discussion of Firewall-1 [mailto:FW-1-MAILINGLIST@beethoven.us.checkpoint.com]On Behalf Of Russell Washington
Sent: Tuesday, June 18, 2002 2:43 PM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: Re: [FW-1] Will SecureRemote work over an existing VPN?

Can you clarify something... user is in location A, there is a checkpoint-to-checkpoint VPN from location A to location B, user has SecureRemote in location A... what is the endpoint of the desired SecureRemote connection?  The Checkpoint at location B?  Or something else?

-----Original Message-----
From: Matt Rossiter [mailto:matt@VERIO.NET]
Sent: Tuesday, June 18, 2002 2:05 PM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: [FW-1] Will SecureRemote work over an existing VPN?

This might sound like a funny question, but can a SecureRemote VPN work through an existing checkpoint to checkpoint VPN?  According to the logs, the UDP IKE connection is not getting through to the client because it is dropped under the 'Encrypt rule'.

 

I'm trying to figure this out because I'm supporting users who don't want to simply "disable" secureremote behind the firewall.  I know it sounds dumb.

 

I'm using build 4199 and the two firewalls in question are firewall 4.1 SP3 running on Nokias.

 

Any help would be appreciated.

 

Thanks!!

 

Matt