Re: [FW-1] Encryption/Decryption Failure

[Russell Washington <russ.washington@FW1-NOSPAMVAULTSENTRY.COM>]

Title: Message

And is this a Checkpoint to Checkpoint VPN or is there a different vendor product (which one?) at the other end?

-----Original Message-----
From: Avi Nehori [mailto:anehori@ZAHAV.NET.IL]
Sent: Tuesday, August 06, 2002 11:38 AM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: Re: [FW-1] Encryption/Decryption Failure

what kind of encryption method is it?

-----Original Message-----
From: Mailing list for discussion of Firewall-1 [mailto:FW-1-MAILINGLIST@beethoven.us.checkpoint.com]On Behalf Of Jean-Baptiste Roger
Sent: Tuesday, July 23, 2002 9:52 AM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: [FW-1] Encryption/Decryption Failure

Hello,

I've got a problem with VPN on NG FP-2, connections that should be
routed through the tunnel are dropped by the encryption rule.

In the log, the info field contains a message Microsoft could be proud
of: "encryption failure: Encryption/Decryption Failure". Bravo Check
Point, that's awfully helpful.

I've tried perhaps all the possible combinations of VPN options,
including key exchange for subnets, UDP encapsulation, Perfect Forward
Secrecy etc, but don't have any clue.

I'm running the VPN gateways on Linux gateway on the both sides. Management is on NT, which is
situated in a rfc1918 network, it has a statically translated legal
address, and it is accessible from both the gateways.

Anyone has a similar problem? Any hints?

Just for the record -- it's basically an upgrade from 4.1, i.e. the
"traditional" policy with an encryption rule. To be absolutely sure
nothing gets in their way, I've allow! ed all communication between the
gateways and between the management and both gateways. The encryption
rule is the first one.

I'll be grateful for any comments.

John Rogeer

---

Yahoo! Mail -- Une adresse @yahoo.fr gratuite et en français !