[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] Hybrid IKE Securemote problem
True, with one minor correction. The SP1 GUI includes the hybrid selection - installed it successfully at my last job. Dan Hitchcock CCNA, MCSE Network Engineer Xylo, Inc. (formerly employeesavings.com)The work/life solution for corporate thought leaders -----Original Message----- From: Jim Brown [mailto:[email protected]] Sent: Thursday, September 07, 2000 12:50 PM To: 'Mark van Kerkwyk'; Firewall-1 Maillist Subject: RE: [FW1] Hybrid IKE Securemote problem Just did this yesterday. You must stop the firewall service to create and install the certificate. You must do a fwstop before you issue both commands or the cert will not show up on the object. The certificate commands will not complain, it just won't work until the firewall service is stopped. As far as the Hybrid IKE selection, you must be using the new SP2 GUI for it to appear. There is a minor note in the document to that effect. -----Original Message----- From: Mark van Kerkwyk [mailto:[email protected]] Sent: Thursday, September 07, 2000 3:14 AM To: Firewall-1 Maillist Subject: [FW1] Hybrid IKE Securemote problem Hi, I'm having problems getting Hybrid IKE Securemote setup, I have followed the CP document on it. Running 4.1 and I have the following eval license. 10.10.10.10 30Sep2000 cpsuite-eval-des-v41 cprs:4.1:rs5 cpsuite-eval-des-v41 cprs:4.1:rs5 CK-EE0136198FC4 I have created the internalca (using fw internalca create -dn "O=FRED,C=US") and certified the firewall object (fw internalca certify -o FW-MOF "O=FRED,C=US") , both appear to work successfully, but when I go into the workstation object, there are no certs in the list, no is there an option to select Hybrid in the IKE workstation properties Any ideas ?? Could there be a licensing issue, is a ca license required ?? Thanks Mark ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|