[FW-1] Office mode in NG-FP2 and NAT problem

[John Biel <John.Biel@FW1-NOSPAMLINAMAR.COM>]

        I can get office-mode to work, but not in the one scenario that
actually motivates me to use it, I wonder if anyone has seen this or has
an answer for it. (Checkpoint NG-FP2 on W2K with SecureClient build
52057 WinXP clients).

This scenario works:
Firewall interface 1 has the protected network at 192.168.1.1, and
interface 2 is the internet.
On the client-side is a cable-router with interface 1 as the protected
network at 192.168.2.1, and interface 2 is the internet.
The client gets 192.168.2.2 from the cable-router and after
authenticating it gets an office mode ip of 172.16.1.2 as well.

This one doesn't:
Firewall interface 1 192.168.1.1, and interface 2 is internet
The cable-router interface 1 is 192.168.1.1 (same as firewall), and
interface 2 is internet.
The client gets 192.168.1.2 from the cable-router, it authenticates to
the Checkpoint firewall but never gets office-mode ip, it eventually
times out saying timeout communicating with firewall. The firewall log
shows that the topology download was sent. If you start at scenario 1
and authenticate so get the complete connection and topology then switch
the cable-router to scenario 2 and try again it still doesn't work.

Has anyone been able to get this to work? Wasn't this what office-mode
was supposed to resolve?

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================