NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] SecurID



Don,

What you are trying to do is unsupported in a Nokia environment.  If you
want to use SecurID with NG FP1 on a Nokia, you will have to use it as a
RADIUS server.  I've been told to expect it to be resolved in either FP2 or
FP3...

-Mike
----- Original Message -----
From: "Don" <[email protected]>
To: <[email protected]>
Sent: Wednesday, February 27, 2002 12:25 AM
Subject: [FW-1] SecurID


> Nokia IP 330
> IPSO 3.4.2
>
> CP NG FP1
> EMC + Module
>
> ACE Server 4.x
>
> When I attempt to use SecurID Authentication, fwssd core dumps on me.
>
> If I client auth with a username and password everything works fine.
> If I attempt to use a user with SecurID defined, then the connection hangs
> and fwssd core dumps.
>
> I configured the ACE server with the firewall as a client, with the
> hostname configured to match on both systems with the primary IP matching
> on both sides. I configured the secondary nodes for the other interfaces
> on the firewall. I configured users on the client and set the encryption
> for DES. I then copied sdconf.rec from c:\ace\data into /var/ace on the
> IPSO box. After attempting an authentication from the firewall (and the
> subsequent fwssd core dump) there is still no node secret exchange.
>
> The rule set allows all communications between the firewall and the ACE
> server.
>
> This ACE server works. It is being used by a dial in server now.
>
> Does SecurID 4.x work with NG FP-1?
>
> Any help would be appreciated.
>
> -Don
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.