Re: [FW-1] Secure Remote NG FP2 Session drops....

[Sébastien Risse <sebastien.risse@FW1-NOSPAMCLICK-AND-TRUST.COM>]

Hi,

I've got exactly the same problem and i've not yet any solution. I tried to
change the internal IP address with the external but i obtained the
following error when i have installed the rules on the firewall :

Compiled OK.
  Failed to find the local management station object
  Failed to Download Security Policy on mercure. File exists
Installing Security Policy on mercure failed

According to me, it's normal because all the configuration of my firewall
was made on the internal IP address. So, i'm very interested by the hotfix
that Checkpoint will write.

Sébastien RISSE.

----- Original Message -----
From: "John Biel" <John.Biel@LINAMAR.COM>
To: <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
Sent: Thursday, August 15, 2002 2:46 PM
Subject: Re: [FW-1] Secure Remote NG FP2 Session drops....


> I'm dealing with support on this issue right now. The most likely reason
> you're having this is that your firewall object has the private address
> set in "general properties" rather than the external address of the
> firewall. It likely happens when securemote renegotiates the phase 1
> key. One fix is to change the private address to the external one.
> (You can also see the problem if you put a sniffer on the outside of the
> firewall. You'll see that when the renegotiation occurs, the firewall
> will use it's private address as the source address instead of the
> external one.) If you can't for various reasons change the private
> address there is a hotfix that you can get from Checkpoint to fix the
> problem. However I'm having great difficulty in getting it.... I started
> attempting last Friday and still don't actually have it. Checkpoint
> support is pathetic, it took 2 days just to get them to admit that they
> make a fix for this problem, and now it's been another 2 days since and
> I still don't actually have it yet.
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================