[FW-1] Back connections via Pool NAT

[Can2002 <notleyc+maillists.checkpoint@FW1-NOSPAMFASTMAIL.FM>]

I'm running FP3 on a Nokia box (with HF2) and have just configured it for
Secure Client.  I've created a network object and defined it for use with
IP Pool NAT.

I want to be able to allow back connections from machines at my main
office and have checked the 'Enable tunnel refresh' option in global
properties.  I can see on tracker that the source addresses Secure
Clients are being translated to the pool NAT range and can connect to
devices in my encryption domain.  If I try to ping the assigned IP
address from inside the encryption domain it times out and I see the
following error in Tracker:

"encryption fail reason: SR tunnel failure, unknown user name"

Any help would be appreciated.

Cheers,
Chris

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================