[FW-1] SecuRemote - Site Says It Is Not a Certificate Authority

[Andrew W Barkley <abarkle3@FW1-NOSPAMCSC.COM>]

Hi ...


Since migrating our 4.1 manager to NG FP2 (with 4.1 backwards
compatibility) users re-creating/creating new SecuRemote sites are
experiencing the same problem as described in the following link.

http://www.phoneboy.com/fom-serve/cache/461.html


NOTE: Management console and firewall module are on separate boxes, clients
use SecuRemote & connect via ISP to firewall module, client's SecuRemote
site points to external NAT IP on firewall module which NAT/route to
internal manager

ARP entry for external NAT IP exists on firewall module
ROUTE entry for external NAT IP exists on firewall module & routes to
internal manager firewall module
RULE/NAT are correct, logviewer verifies rule & nat
SNOOP on manager (port 264) verifies bi-directional traffic when attempting
to re-creating/creating new SecuRemote site
CLIENTS (srsc_41_sp5_4199_win2k_strong.zip & srsc_4200_w2k_strong.exe)
produce same results
LICENSES for SecuRemote are only available for NG it seems, I have applied
these to the manager


Many thanx for any advice

Andrew

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================