Re: [FW-1] Problem to establish VPN connection (NAT pb...?)

2007-06-06 Thread Joel Guillerm
-- Joel GUILLERM Architecte Réseaux/Sécurité CISCO Certified (CCDP) IBM Global Services - ITS Agence IBM NANTES EMAIL : [EMAIL PROTECTED] TEL: +33.2.4041.4638 (int. : 874638) Mobile : +33.6.8503.3184 FAX: +33.2.4041.4638 Shiroma Dassanayake [EMAIL PROTECTED

[FW-1] Problem to establish VPN connection (NAT pb...?)

2007-05-31 Thread Joel Guillerm
Checkpoint R62, 2 Nokias in a Cluster , SecureClient R56 VPN tunnels can be established from the inside network, but we are unable to establish it from Internet; the reason might be that the Firewall is hidden behind a NAT device (Redware machines) ; We have tried to code the Statically NATted

[FW-1] Problem to establish VPN connections from SecureClient

2007-05-28 Thread Joel Guillerm
Hello, our environment is as follows : Cluster of 2 Nokia IPSO 4.2, CheckPoint NGX R62 , SecureClient NG AI R56 We tried to establish a VPN connection from a Win XP SecureClient PC client without success ; no way to get any logs about these VPN tests under SmartTracker or in Secure client

[FW-1] Nokia IPSO 4.1 + Checkpoint NGX R62 : high memory consumption

2007-05-20 Thread Joel Guillerm
Nokia IPSO 4.1 + Checkpoint NGX R62 : high memory consumption problem The memory consumption on our 2 new Nokia IP 560 seem rather high (about 75% used, and they do nothing for now, just in test mode) , according to Voyager web interface and vmstat command : here are those figures (RAM = 1GB

Re: [FW-1] VPN SecureClient : IP flows to a new internal network not encrypted in the VPN tunnel

2007-05-20 Thread Joel Guillerm
changing your encryption domain did you do a site update on the client? -GS -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Joel Guillerm Sent: Friday, May 18, 2007 4:56 PM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject

[FW-1] VPN SecureClient : IP flows to a new internal network not encrypted in the VPN tunnel

2007-05-18 Thread Joel Guillerm
Checkpoint NG R55, Nokia IPSO 4.1, SecureClient R56 ; VPN tunnel is established correctly from the SecureClient PC ; IP address is correctly affected to the PC ; everything has been working OK for a while ; now, we wants to give access to a new internal LAN network ; so, we defined it

[FW-1] Nokia VRRP Simplified Method : Problem

2007-05-16 Thread Joel Guillerm
We have 2 Nokia with 16 LAN interfaces (IPSO 4.1 + CheckPoint NGX R62) ; we used the VRRP simplified method to configure VRRP on both Nokia ; To test the VRRP failover mechanism, we unplug 1 cable on the VRRP Master Nokia, and we can see the associated virtual IP is correctly taken over by the

[FW-1] VPN connection with SecureClient R56 OK, but no IP address assigned

2007-05-16 Thread Joel Guillerm
Nokia + Checkpoint R55 SecureClient R56 on Windows XP VPN connection works correcty generally with most PCs, but with some PCs (Windows XP but this is not a constant), no IP address is assigned to the PC for this tunnel connection, although the VPN tunnel is established, no error appears ; I

[FW-1] Pb to migrate from NG R55 to NGX R62 with some IP address changes

2007-05-01 Thread Joel Guillerm
objects are concerned thanks in advance for your help -- Joel GUILLERM = To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED