[FW1] VPN & Securemote & Encryption Domain Definition

["Robert Hough" <tmex@FW1-NOSPAMsympatico.ca>]

I have two firewalls in two geographic locations with a VPN between them.
Site A also allows users to connect to the Site A internal network
10.0.100.x via securemote.  My firewalls are "managed" by a large vendor who
is telling me now that we cannot have users connect to the firewall in Site
A and via the firewall VPN connect to Site B's network via the firewall vpn
to connect to network 10.0.101.x because of the encyption domain.

The solution that was recommended was to allow users to connect to the
firewall in Site B and access the network via that point.  However, we are
using Securid for authentication and really do not want to set up another
server in the Site B location.  The offices are small and we are trying to
keep costs down.  Anyone had this scenario and an innovative solution to
allow us to connect
to Site B via the firewall vpn between A & B?

Thanks...rob



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================