[FW-1] tcp packet out of state: First packet isn't SYN

Following error is appearing at SmartTracker’s log and connection couldn’t be done. tcp packet out of state: First packet isn't SYN tcp_flags: RST-ACK Why is happened? = To set vacation, Out-Of-Office, or away messages, send an email

[FW-1] Linux VPN Client with kernel 2.6

Hello, I'm trying to use a Linuxbox to connect to a CP-FW1 (R55) VPN Gateway. Unfortunately there is no VPN client from CP for the Linux i'm using (Fedora Core 4, Kernel 2.6.15). Does anybody know a client to connect to the VPN Gateway? Most clients available seems to need kernel 2.4, which is

Re: [FW-1] VPN between AI R55 and Cisco

Did you see the second phase configuration at VPN Community ? I hope it's misconfigured. If you have other VPN's connected to this CP gateway, you can getting another problem with supernets. I can see decrypts coming in and they can actually ping a box on my LAN which is good but i can't ping

[FW-1] Réf. : Re: [FW-1] VPN between AI R55 and Cisco

Hello It's the remote box that doen't accept IPSEC traffic from you Bertrand Tom Brown [EMAIL PROTECTED]@AMADEUS.US.CHECKPOINT.COM le 28-03-2006 15:56:35 Veuillez répondre à Mailing list for discussion of Firewall-1 FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Envoyé par :

Re: [FW-1] Linux VPN Client with kernel 2.6

Christoph Trahm wrote: I'm trying to use a Linuxbox to connect to a CP-FW1 (R55) VPN Gateway. Unfortunately there is no VPN client from CP for the Linux i'm using (Fedora Core 4, Kernel 2.6.15). Does anybody know a client to connect to the VPN Gateway? Most clients available seems to need

[FW-1] SecureClient error - tunnel test (NGX R60)

Hello I have a problem with SecureClient and Office Mode. Sometimes when the client connects to the gateway He gets information that connection is succesfull, but the communication doesn't work. Under Secure Client diagnostic we can see following error Tunnel test failure. Try to check Force

Re: [FW-1] Réf. : Re: [FW-1] VPN between AI R55 and Cisco

Hello, The problem is that you have misconfigured the your network in the remote side so when you try to reach them their VPN side tells you that you are not defined in their VPN doamin for your gateway. Carlos Caballero Ingeniero de comunicaciones Banco Mercantil S.A. La Paz - Bolivia Telf:

Re: [FW-1] Backup of Solaris

Yes, this is good advice. By far ufsdump is the best way to clone your entire disk from one machine to another. However, I suppose it is just another strategy, but I feel that is you are going to have a backup hardware system, you might as well go ahead and build it exactly like your primary,

[FW-1] ssh to nokia running ipso 9

I upgraded me nokia ip 530 to version 9. Before I used to ssh on the box from any network but now it only connects from one network. I have two internal networks and one is external which connects to internet. It has public Ip address. I cannot access nokia through internet or the other

Re: [FW-1] ssh to nokia running ipso 9

hi, maybe your fw1-policy drops ssh-connections? ipso 3.9 has ssh as a default feature. cheers reinhard At 20:54 28.03.2006, you wrote: I upgraded me nokia ip 530 to version 9. Before I used to ssh on the box from any network but now it only connects from one network. I have two internal

Re: [FW-1] VPN between AI R55 and Cisco

Hello, there is the possibility that the other side performs NAT for their system's IP addresses. If so, you should try to ping that NATted address, not the actual address of the server behind the remote gateway. On 28/03/06, Tom Brown [EMAIL PROTECTED] wrote: Did you see the second phase

Re: [FW-1] VPN between AI R55 and Cisco

Tom, Symptoms: Error in log viewer: Encryption failure: packet is dropped as there is no valid SA Cause of this problem : In VPN-1/FireWall-1 NG, by default, the option: ike_use_largest_possible_subnets is set to true, which will cause the VPN-1 gateway to summarize subnet information sent in

Re: [FW-1] SecureClient error - tunnel test (NGX R60)

Are you using Office Mode? The error message says you should be because someone else with the same local IP adress is connected at the same time. Is that possible? Ray From: G³owacki S³awomir [EMAIL PROTECTED] Reply-To: Mailing list for discussion of Firewall-1

Re: [FW-1] time sync problem

Hi, Had you set up NTP on your enforcement and management server? Regards, Al 김경희 wrote: We have done clustering of firewall. After that, we have a problem of time sync. The time stamp of Tracker’s log is displayed incorrectly. To correct time’s stamps, we tried to revise firewall

[FW-1] SNX DNS suffix problem

On NGX R60 HFA-02 (SPLAT), we're seeing SNX (SSL Network Extender) reversing the order of DNS suffixes. Check Point seems to know it's an issue but no viable solution has yet been provided. Anyone run across this? TIA, Bill = To set vacation,

Re: [FW-1] Backup of Solaris

By far the best way I have seen and also the check point recommended way is to use upgrade_export to export the firewall configuration if you are using NGAI R55 or later. Ramki Hal Dorsman wrote: Yes, this is good advice. By far ufsdump is the best way to clone your entire disk from one

[FW-1] Can Cisco Content Switching works with firewall cluster (Check Point+ RainWall) ?

Dear Honorable Experts, I have a question about Cisco Content Switching and firewall cluster (Check Point + RainWall) which made me wonders if these can work each others. We currently in progress to set up Content Switching between two location (which shares same private and public VLANs). At

Re: [FW-1] Can Cisco Content Switching works with firewall cluster (Check Point+ RainWall) ?

Are you using the Content Switch to load balance web servers or are you replacing Rainwall with the Content switch? The latter is a bad idea, the former should work fine. I think a few more details about what you're trying to accomplish with these two solutions would help in answering your

Re: [FW-1] Can Cisco Content Switching works with firewall cluster (Check Point+ RainWall) ?

Hi, Well... we going to use Content Switch to load balance the web, ftp email servers. Can Rainwall do the same thing without do it using Content Switch? Al billford wrote: Are you using the Content Switch to load balance web servers or are you replacing Rainwall with the Content switch?