NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW1] SecurRemote Error: Site is not a CA




Hi, I saw this before, check the certificates of the firewall objects and you see something like this: cn=.. O=.. CA .. Status: signed. When you created certificate for the firewall, make sure stop firewall first.


Weimin


----Original Message Follows----
From: "jeff Crawley" <[email protected]>
To: [email protected]
Subject: [FW1] SecurRemote Error: Site is not a CA
Date: Mon, 15 Jan 2001 16:18:09 -0000
MIME-Version: 1.0
X-Originating-IP: [141.228.156.225]
Received: from [205.163.57.66] by hotmail.com (3.2) with ESMTP id MHotMailBC2C71AC006C40043112CDA33942F3241; Mon Jan 15 08:35:14 2001
Received: from localhost (daemon@localhost)by softwhisper.us.checkpoint.com (8.9.3/8.9.3/CPsoftwhisper/1.3.1) with SMTP id IAA28939;Mon, 15 Jan 2001 08:21:19 -0800 (PST)
Received: by softwhisper.us.checkpoint.com (bulk_mailer v1.5 with hacks by [email protected]); Mon, 15 Jan 2001 08:18:36 -0800
Received: (from majordom@localhost)by softwhisper.us.checkpoint.com (8.9.3/8.9.3/CPsoftwhisper/1.3.1) id IAA28370for fw-1-mailinglist-outgoing; Mon, 15 Jan 2001 08:18:33 -0800 (PST)
Received: from us.checkpoint.com (oak.us.checkpoint.com [206.86.35.94])by softwhisper.us.checkpoint.com (8.9.3/8.9.3/CPsoftwhisper/1.3.1) with ESMTP id IAA28330for <[email protected]>; Mon, 15 Jan 2001 08:18:23 -0800 (PST)
Received: from onus.us.checkpoint.com (localhost [127.0.0.1])by us.checkpoint.com (8.9.3+Sun/8.9.3/CPoak/1.5.1) with ESMTP id IAA27383for <[email protected]>; Mon, 15 Jan 2001 08:18:12 -0800 (PST)
Received: from hotmail.com (f6.law11.hotmail.com [64.4.17.6])by onus.us.checkpoint.com (8.10.1/8.10.1/CPmx/1.3.0) with ESMTP id f0FGIGm28869for <[email protected]>; Mon, 15 Jan 2001 08:18:16 -0800 (PST)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Mon, 15 Jan 2001 08:18:10 -0800
Received: from 141.228.156.225 by lw11fd.law11.hotmail.msn.com with HTTP; Mon, 15 Jan 2001 16:18:09 GMT
From [email protected] Mon Jan 15 08:36:20 2001
Message-ID: <[email protected]>
X-OriginalArrivalTime: 15 Jan 2001 16:18:10.0245 (UTC) FILETIME=[C082EF50:01C07F0E]
Sender: [email protected]
Errors-To: [email protected]
Precedence: bulk



Hello Forum, I am getting the following error when I try and create a site from a Secure Remote Client using IKE encryption. This works fine with FWZ.

Error: Site ..xxx.xxx says that it is not a Certificate Authority.
Check whether you have got the right IP address for xxx.xxx.xxx.xxx,
and check with the FW-1 system manager there whether xxx.xxx.xxx.xxx
is indeed a FW-1 control station.

I have created a CA and generated a Certificate and this is running
under an eval license so this should cover it.

Firewall version is 4.1 build 41716 VPN DES STRONG.

I did have this running but after much changing of the policy, I can't
get this back.

Any ideas would be appreciated.

Thanks,
Jeff Crawley

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.



================================================================================
    To unsubscribe from this mailing list, please see the instructions at
              http://www.checkpoint.com/services/mailing.html
================================================================================

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com



================================================================================
    To unsubscribe from this mailing list, please see the instructions at
              http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.