The Standalone Checkpoint box (i.e Management server/Firewall) is a nokia IP650 with the clock sync with a Datum GPS time server and the clock is correct. Same thing with the SecureRemote client. That same client can connect to an R55w standalone firewall just fine. However, when it connects to an NGx R60 standalone firewall, that's when I get into trouble. Any more ideas? TIA cisco4ng
Jeremy Lieb <[EMAIL PROTECTED]> wrote: Is the date on the Gateway, Management server, or Secure Remote client incorrect? That could invalidate the certificate and give you errors like what you are seeing. Jeremy Lieb CCSE-NG CCSE+NG Firewall Administrator Open Text Corporation 100 Tri-State Int'l Pkwy Third Floor Lincolnshire, IL 60069 18472679330 ext 4395 -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of cisco4ng Sent: Tuesday, July 18, 2006 4:08 PM To: [email protected] Subject: [FW-1] Differences between R55w and NGx R60 can you guys help me with this? SecureRemote is not my strongest point. I have a AI R55w with HFA_04 standalone firewall. I can connect to it via SecureRemote just fine. Everything works. When I upgrade to NGx R60 and apply a new NGx license, I can not connect with SecureRemote anymore. I am getting this error: Could not validate the certificate used by gateway dca2-Fairfax at site 129.174.1.8. cannot complete certificate chain O=dca2-Fairfax.network24x7.c This is the license on the FW. I removed some of the information for security reason including the IP address. What you're seeing is a "fake" ip address. [Fairfax]# cplic print Host Expiration Features 129.174.1.8 never CPVP-VIG-250-3DES-NGX CPVP-VPS-1-NGX CPMP-DBVR-U-NGX CK-XXXXXXX [Fairfax]# Even with a brand-new install of NGx R60 will not resolve this issue. Did checkpoint do something to NGx R60? I am running the latest HFA-03 on this box. Tested with both Nokia and SPLAT. Same issue. Last but not least, I can not perform more than 1 port-redirect on the firewall External interface with NGx R60 with this license. Prior to upgrading to R60, on my R55w box, I can perform many port-redirect on the firewall external interface to many hosts behind the firewall with multiple services. What is CP doing in NGx R60 that break this thing? Any ideas? cisco4ng --------------------------------- See the all-new, redesigned Yahoo.com. Check it out. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= --------------------------------- Yahoo! Music Unlimited - Access over 1 million songs.Try it free. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
