We assign an IP Pool address to the Office Mode connection that is not one of the non-routables and not any of our internal address blocks. Our routers send everything at the firewall that they don't know where to send, so the IP Pool responses always go where they should.
Ray Pesek, CISSP
From: Jeremy Lieb <[EMAIL PROTECTED]> Reply-To: Mailing list for discussion of Firewall-1 <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: [FW-1] Recommended cable / dsl routers for SecuRemote Date: Tue, 13 Jan 2004 21:15:35 -0600
Actually we have found that even using Office Mode, if the network behind the home router matches a network behind our Encryption domain, we still can't connect. Did you do anything special to get this to work?
Jeremy Lieb CCNA CCSA-NG CCSE-NG Firewall Administrator Open Text Corporation 847-267-9330 ext 4395 -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Ray Pesek Sent: Tuesday, January 13, 2004 8:30 PM To: [EMAIL PROTECTED] Subject: Re: [FW-1] Recommended cable / dsl routers for SecuRemote
We have used various Linksys devices fine, although some of the older ones (pre-existing at an employee's home) required flash updates. The 2Wire HomePortal works very well also. We never could get the D-Link 614+ working but the 714 worked out of the box.
We use the SecureClient packaging tool to force the clients to use UDP Encapsulation and IKE over TCP. We also use Office Mode. We have never had a NAT issue even with multiple connections behind the same router and Office Mode completely fixes the problem where the employee's home network has the same IP range as your internal network.
Ray Pesek, CISSP
>From: "Steck, Steffen M." <[EMAIL PROTECTED]> >Reply-To: Mailing list for discussion of Firewall-1 ><[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: [FW-1] Recommended cable / dsl routers for SecuRemote >Date: Tue, 13 Jan 2004 16:48:40 +0100 > >Hello, >can anybody please tell me which cable / dsl routers you have proven to >work >with SecuRemote (4.1 B4200 / NG) connecting through them to VPN-1 NG AI? >I start an evaluation for a corporate standard model for our home >offices... > >================================================= >To set vacation, Out-Of-Office, or away messages, >send an email to [EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[EMAIL PROTECTED] >=================================================
_________________________________________________________________ Get a FREE online virus check for your PC here, from McAfee. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
_________________________________________________________________ Learn how to choose, serve, and enjoy wine at Wine @ MSN. http://wine.msn.com/
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
