Re: [FW1] VPN & Securemote & Encryption Domain Definition

[Peter Goodridge <petegdr@FW1-NOSPAMyahoo.com>]

Hi Rob,

Can't you have the firewall at site B check
authentication by accessing the Securid server at Site
A.  You'll want to be very careful that all the
traffic is encrypted.

HTH,
Pete Goodridge

--- Robert Hough <tmex@sympatico.ca> wrote:
> 
> I have two firewalls in two geographic locations
> with a VPN between them.
> Site A also allows users to connect to the Site A
> internal network
> 10.0.100.x via securemote.  My firewalls are
> "managed" by a large vendor who
> is telling me now that we cannot have users connect
> to the firewall in Site
> A and via the firewall VPN connect to Site B's
> network via the firewall vpn
> to connect to network 10.0.101.x because of the
> encyption domain.
> 
> The solution that was recommended was to allow users
> to connect to the
> firewall in Site B and access the network via that
> point.  However, we are
> using Securid for authentication and really do not
> want to set up another
> server in the Site B location.  The offices are
> small and we are trying to
> keep costs down.  Anyone had this scenario and an
> innovative solution to
> allow us to connect
> to Site B via the firewall vpn between A & B?
> 
> Thanks...rob
> 
> 
> 
>
================================================================================
>      To unsubscribe from this mailing list, please
> see the instructions at
>               
> http://www.checkpoint.com/services/mailing.html
>
================================================================================


__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - Buy the things you want at great prices. 
http://auctions.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================