Hi, I saw this before, check the certificates of the firewall objects and
you see something like this: cn=.. O=.. CA .. Status: signed. When you
created certificate for the firewall, make sure stop firewall first.
Weimin
----Original Message Follows----
From: "jeff Crawley" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: [FW1] SecurRemote Error: Site is not a CA
Date: Mon, 15 Jan 2001 16:18:09 -0000
MIME-Version: 1.0
X-Originating-IP: [141.228.156.225]
Received: from [205.163.57.66] by hotmail.com (3.2) with ESMTP id
MHotMailBC2C71AC006C40043112CDA33942F3241; Mon Jan 15 08:35:14 2001
Received: from localhost (daemon@localhost)by softwhisper.us.checkpoint.com
(8.9.3/8.9.3/CPsoftwhisper/1.3.1) with SMTP id IAA28939;Mon, 15 Jan 2001
08:21:19 -0800 (PST)
Received: by softwhisper.us.checkpoint.com (bulk_mailer v1.5 with hacks by
[EMAIL PROTECTED]); Mon, 15 Jan 2001 08:18:36 -0800
Received: (from majordom@localhost)by softwhisper.us.checkpoint.com
(8.9.3/8.9.3/CPsoftwhisper/1.3.1) id IAA28370for fw-1-mailinglist-outgoing;
Mon, 15 Jan 2001 08:18:33 -0800 (PST)
Received: from us.checkpoint.com (oak.us.checkpoint.com [206.86.35.94])by
softwhisper.us.checkpoint.com (8.9.3/8.9.3/CPsoftwhisper/1.3.1) with ESMTP
id IAA28330for <[EMAIL PROTECTED]>; Mon, 15 Jan 2001
08:18:23 -0800 (PST)
Received: from onus.us.checkpoint.com (localhost [127.0.0.1])by
us.checkpoint.com (8.9.3+Sun/8.9.3/CPoak/1.5.1) with ESMTP id IAA27383for
<[EMAIL PROTECTED]>; Mon, 15 Jan 2001 08:18:12 -0800
(PST)
Received: from hotmail.com (f6.law11.hotmail.com [64.4.17.6])by
onus.us.checkpoint.com (8.10.1/8.10.1/CPmx/1.3.0) with ESMTP id
f0FGIGm28869for <[EMAIL PROTECTED]>; Mon, 15 Jan 2001
08:18:16 -0800 (PST)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Mon, 15 Jan 2001 08:18:10 -0800
Received: from 141.228.156.225 by lw11fd.law11.hotmail.msn.com with
HTTP; Mon, 15 Jan 2001 16:18:09 GMT
>From [EMAIL PROTECTED] Mon Jan 15 08:36:20 2001
Message-ID: <[EMAIL PROTECTED]>
X-OriginalArrivalTime: 15 Jan 2001 16:18:10.0245 (UTC)
FILETIME=[C082EF50:01C07F0E]
Sender: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
Precedence: bulk
Hello Forum,
I am getting the following error when I try and create a site from a
Secure Remote Client using IKE encryption.
This works fine with FWZ.
Error: Site xxx.xxx.xxx.xxx says that it is not a Certificate Authority.
Check whether you have got the right IP address for xxx.xxx.xxx.xxx,
and check with the FW-1 system manager there whether xxx.xxx.xxx.xxx
is indeed a FW-1 control station.
I have created a CA and generated a Certificate and this is running
under an eval license so this should cover it.
Firewall version is 4.1 build 41716 VPN DES STRONG.
I did have this running but after much changing of the policy, I can't
get this back.
Any ideas would be appreciated.
Thanks,
Jeff Crawley
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
