Re: [FW1] v4 and v4.1 ISAKMP VPN

[CryptoTech <cryptotech@FW1-NOSPAMgmx.de>]

I think you may want to check on the 4.1 firewall and look under IKE properties to
see if subnet support is enabled.  v4.0 sp3 did not have the ability to detect that
the other side was using subnet based SA's and so you got no notification of this
problem.  You also might consider service packing the build 4.058 firewall.

Cheers,
CryptoTech

"LIM, Norman" wrote:

> Hello,
>
> I had 2 firewalls on v4 patch4058 running a ISAKMP VPN and one of the
> firewall needs to upgrade to v4.1 due to the imminent expiry of the v4
> licenses. After upgrading that firewall, the VPN do not work. Attempting to
> connecting to the other site using the legal & illegal IP all do not work.
> The firewall log also do not show any entries of the attempted operation.
>
> Does anyone has any experience of this failure after the upgrade? Any
> suggestions/workarounds greatly appreciated.
>
> Thanks,
> Norman Lim
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================