[FW-1] Secure Client on Internal Network?

[kim reed <kreed@FW1-NOSPAMNSEC.NET>]

Hi all:

Does anyone know the secret to getting Secure Client to work on the internal
network, NG, FP3? The purpose is to have a policy installed before laptops
are taken out of the office.

Using Office Mode the connection is dropped with a packet out of state
message (it tries to send the response back through the external interface
which makes sense with Office mode).

If Office mode is not used, it is still dropped with error of "encryption
failed: received a cleartext packet within an encrypted connection."

In both cases, the key exchange is occurring and fw1_topo service as well as
fw1_pslogon are initially accepted, then the connections are dropped.

Documentation indicates SC can be used on the internal network, but no good
details on configuring it (other than using another gateway internally).

Kimberly Reed
Network Security Corp

**************************************************************************************************
The contents of this email and any attachments are confidential.
It is intended for the named recipient(s) only. If you have received this email in error
please notify the system manager or  the sender immediately and do not disclose the
contents to any one or make copies.

NSEC Protected E-Mail
**************************************************************************************************

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================