Re: [FW-1] encryption fail reason: temporary unavailable resources

[Reinhard Stich <r.stich@FW1-NOSPAMINTERNET-SECURITY.AT>]

hi,

any info about this error-message:


encryption fail reason: temporary unavailable resources

cheers
reinhard

At 09:54 05.05.2003 -0400, you wrote:
> I am having a problem after upgrading from 4.1 SP6 to NG FP3.
>
> The problem is that internal IP addresses can no longer access a VPN
> SecuRemote/SecureClient users.  The error gets logged as
> "encryption fail reason: temporary unavailable resources"
>
> I am using IKE pre-shared secrets and IP NAT Pool and SecuRemote and Secure
> Client 4.1 (SP5) and NG FP3.  The firewall and management station are both
> NG FP3...
>
> Most applications work except the ones that require a back connection.  I
> can replicate the problem by initiating a ping from Internal IP to SR/SC IP
> NAT Pool address...
>
> So basically...
> If an internal user/application tries to ping/access the IP NAT Pool address
> it will fail with error "encryption fail reason: temporary unavailable
> resources"
> But if internal ip tries to ping/access the address bound to
> SecuRemote/SecureClient NIC then it will work.
>
> Thanks
> T.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV@amadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================

--
Reinhard Stich,   ASSIST    R.Stich@internet-security.at
Internet Security AG, 1190 Wien, Nussdorfer Laende 29-33
Tel: +43 1 370 94 40  RS784-RIPE Fax: +43 1 370 94 40-10

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================