[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] FP-3 VPN trouble (temporary unavailable resources)



Well, I thought that Remote Access means securemote/secureclient connections not gateway gateway VPNs.
Additionally I cannot select 3DES as encryption algorithm but DES,AES128 and AES-256.


Regards,
Egonle


"Mr.P.Taylor" <[email protected]> wrote:

>I have been able to establish a vpn between NG FP3 HF1 and 4.1 sp3
>just make sure that in global properties you choose the same configuration
>as the remote. Global Properties-Remote Access-VPN Advanced is used for
>backwards compatibility, I also ensured that Group 1 was enabled (768 bit)
>oh and this was an upgrade so FP3 has backwards compatibility installed.
>3DES,MD5,768 bit.
>
>> -----Original Message-----
>> From: Mailing list for discussion of Firewall-1
>> [mailto:[email protected]]On Behalf Of
>> William Wang
>> Sent: Monday, December 23, 2002 9:22 AM
>> To: [email protected]
>> Subject: Re: [FW-1] FP-3 VPN trouble (temporary unavailable resources)
>>
>>
>> No, it's not because of NG FP3(your firewall). You told me your
>> remote partner still uses Checkpoint fw-1 4.1 SP3. It's because
>> of the partner side.
>>
>> -----Original Message-----
>> From: egonle [mailto:[email protected]]
>> Sent: Monday, December 23, 2002 7:43 AM
>> To: [email protected]
>> Subject: Re: [FW-1] FP-3 VPN trouble (temporary unavailable resources)
>>
>>
>> Hi,
>>
>> thanks for any reply :-)
>> Well, it is a site to site VPN configuration. Why should I use
>> DES instead of 3DES? Is 3DES kind of broken in FP3?
>> How about using a different algorithm?
>>
>>
>> Regards,
>> Egonle
>>
>> William Wang <[email protected]> wrote:
>>
>> >Egonle, I guess it should be a site to site VPN configuration.
>> Please make sure you're using DES not 3DES as your Enryption
>> algorithm. Your need to change it from your related rules
>> manually because the default one is 3DES
>> >
>> >-----Original Message-----
>> >From: egonle [mailto:[email protected]]
>> >Sent: Friday, December 20, 2002 8:47 AM
>> >To: [email protected]
>> >Subject: [FW-1] FP-3 VPN trouble (temporary unavailable resources)
>> >
>> >
>> >Hi,
>> >
>> >I'm running a VPN to another company. We've setup FP3-Hotfix1
>> (with stonesoft) the remote partner uses Checkpoint FW-1 4.1SP3.
>> >
>> >Until the upgrade to FP3 anything was just working fine however
>> since our module runs FP3 IKE/IPSec SAs are established but after
>> that the connection the our system is dropped. The info field of
>> the drop is:
>> >"dst scheme: NA, route status: temporary unavailable resources;"
>> . Does anybody know/imagine what that should tell me?
>> >I've switched on/off many options but none did change that
>> error. Please help. Might it be a stonesoft (FC3.0) issue?
>> >
>> >Regards
>> >Egonle
>> >
>> >__________________________________________________________________
>> >The NEW Netscape 7.0 browser is now available. Upgrade now!
>> http://channels.netscape.com/ns/browsers/download.jsp
>> >
>> >Get your own FREE, personal Netscape Mail account today at
>> http://webmail.netscape.com/
>> >
>> >=================================================
>> >To set vacation, Out Of Office, or away messages,
>> >send an email to [email protected]
>> >in the BODY of the email add:
>> >set fw-1-mailinglist nomail
>> >=================================================
>> >To unsubscribe from this mailing list,
>> >please see the instructions at
>> >http://www.checkpoint.com/services/mailing.html
>> >=================================================
>> >If you have any questions on how to change your
>> >subscription options, email
>> >[email protected]
>> >=================================================
>> >
>> >=================================================
>> >To set vacation, Out Of Office, or away messages,
>> >send an email to [email protected]
>> >in the BODY of the email add:
>> >set fw-1-mailinglist nomail
>> >=================================================
>> >To unsubscribe from this mailing list,
>> >please see the instructions at
>> >http://www.checkpoint.com/services/mailing.html
>> >=================================================
>> >If you have any questions on how to change your
>> >subscription options, email
>> >[email protected]
>> >=================================================
>> >
>>
>> __________________________________________________________________
>> The NEW Netscape 7.0 browser is now available. Upgrade now!
>http://channels.netscape.com/ns/browsers/download.jsp
>
>Get your own FREE, personal Netscape Mail account today at
>http://webmail.netscape.com/
>
>=================================================
>To set vacation, Out Of Office, or away messages,
>send an email to [email protected]
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>[email protected]
>=================================================
>
>=================================================
>To set vacation, Out Of Office, or away messages,
>send an email to [email protected]
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>[email protected]
>=================================================
>
>=================================================
>To set vacation, Out Of Office, or away messages,
>send an email to [email protected]
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>[email protected]
>=================================================
>

__________________________________________________________________
The NEW Netscape 7.0 browser is now available. Upgrade now! http://channels.netscape.com/ns/browsers/download.jsp

Get your own FREE, personal Netscape Mail account today at http://webmail.netscape.com/

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================