[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sidewinder
Subject:    [Sidewinder] VPN Sidewinder vs checkpoint
From:       sidewinder () adeptech ! com
Date:       2004-12-06 14:30:06
Message-ID: CE951ED6042FD747B8DFB38315B26C3007297AEA () mad00mp6 ! dot ! state ! wi ! us
[Download RAW message or body]

We have a VPN with a Checkpoint Firewall-1 on the other side.  We found that
we had to "lock down" the encryption and hashing, or we had problems with
FW-1 saying it could accept something, but then not actually accepting it.

Our settings (in each case, these are the ONLY ones in the list (Crypto tab)
or checked (advanced tab)

	Crypto tab:  IPSec Crypto: 3DES   IPSec Hash: hmac-md5-96
	Advanced tab: P1 Crypto: 3DES  P1 Hash: MD5  P1 Oakley: Group 2
(only)

JRJ

> ------------------------------
> 
> Message: 4
> Date: Thu, 2 Dec 2004 11:59:49 -0600
> From: sidewinder@adeptech.com
> Subject: [Sidewinder] VPN Sidewinder vs checkpoint
> To: <sidewinder@adeptech.com>
> Message-ID: <001401c4d898$b878ce50$7cc909c0@bernic>
> Content-Type: text/plain;	charset="iso-8859-1"
> 
> HI guys,
> Well i am trying to configure an VPN beetwen Sidewinder G2 and checkpoint
> but unfortunately i doesn´t work, i am using a sidewinder G2 version
> 6.1.0.02, i obtained an log using de showaudit -v command and there said
> that the Remote Identity doesn´t match with the policy to this VPN,  so at
> the begin the checkpoint start the transaction with an identity that is
> correct but suddenly, a few step after that Identity change, and here is
> where the transaction finish, unfortunately the people that manage the
> checkpoint is not capable to solve that, the question is:
> Does anybody idea why the checkpoint change their identity? or someone
> experienced that problem and if it was solved?.
>
> Thank
> 
> Bernic

_______________________________________________
Sidewinder mailing list
Sidewinder@adeptech.com
http://mail.adeptech.com/mailman/listinfo/sidewinder

[prev in list] [next in list] [prev in thread] [next in thread]