hi,

as HFA509 is released I'd use that because a client-vpn problem is
solved there (vpn-error-code-3)

cheers
reinhard



))) Message  sent  using  Nokia One Business Server (((
))) Internet Security AG - www.internet-security.ag (((

--- Original Message ---
From: Tom Stala <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Date: Thu Sep 30  19:57:57 CEST 2004
Subject: Re: [FW-1] Beware R55 HFA08!


we have just now gotten to putting on R55 HFA08, we had the firewall object
created to the inside interface of the firewall, not the outside.

We have had VPN tunnels running for at 4 months now and they were working
just fine.

We install HFA08 and the tunnels did not come back up after reboot.

Just for kicks we changed the gateway object to the outside IP address and
the tunnels came back up and are working fine.

fix one thing and broke another as usual..


----- Original Message -----
From: "Joe Pope" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, August 12, 2004 11:47 AM
Subject: [FW-1] Beware R55 HFA08!


> Warning if use VPN with R55, especially SecuRemote/SecureClient!
>
> After upgrading from HFA04 to HFA08 we started having decryption errors
(VPN
> error code 03) with our SecureClient users. Somehow the logged IP address
> of the VPN Peer Gateway is getting changed (by the firewall) and then
> decryption fails.  It does not affect all SecureClient users at the same
> time, and after
> a few hours the problem goes away!  I checked my SecureClient while
> monitoring my firewall logs, and my SecureClient IP address was not being
> reported
> in the firewall logs correctly.
>
> I submitted a trouble ticket with Check Point and they know about this
> problem, and they suggested I  roll back to HFA04.
> They said HFA09 is suppose to fix this problem, but no word on when to
> expect this fix.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to