NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Problems with Checkpoint client



IPsec comes in two parts,  Authentication Header (AH) and Encapsulating
Security Payload (ESP).

AH runs a hashing algorithm which includes the source and destination IP
address, if you send a packet that has been AH'd through NAT then one of the
addresses is going to change, therefore the hash aint gonna' match up at the
other end, so the firewall will drop it, which is the whole point of AH...


jp





By
-----Original Message-----
Subject: Re: [FW-1] Problems with Checkpoint client


Hi there

Again, forgive my ignorance, but what is "AH enabled"?

Thanks

Russell

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.