RE: [FW1] Further Dual Nokias with VPN Questions

["McMeekin, Scott" <Mcmeesm@rbos.co.uk>]

Hi Greg,

You can't have both firewalls set to export the same encryption domain,
because as you quite rightly stated, you get the overlapping encryption
domain error. The Nokia's are superb kit, far superior to any
NT implementation IMHO, and the 650's present a good challenge to the
solaris high-bandwidth contingent. This problem is not a Nokia problem,
rather a Checkpoint one, since FW-1 doesn't sync VPN state/info.

I heard a vicious rumor that v4.1 of FW-1 has support for HA VPNs, and
I also believe that this is in beta right now (but as with securemote
v4.1, you can only get it if you have a sympatheric reseller who will
ask Checkpoint for it).

Quite apart from the FW-1 issues, securemote isn't smart enough to detect
that you are running an HA synced infrastructure, and it won't auto-flip
over to the other firewall anyway. Basically, you, me and the rest of
us using FW-1 VPNs are all awaiting FW-1 v4.1 with great anticipation.

Scott.

-============================-
 Scott McMeekin (x25086)
   Senior Technical Analyst
         IT Telecoms
  The Royal Bank of Scotland
  Phone: +44(0)1315235086
  Email: mcmeesm@rbos.co.uk
-============================-


> -----Original Message-----
> From:	Gregory Blake [SMTP:greg@healthgate.com]
> Sent:	Sunday, October 10, 1999 2:44 PM
> To:	fw-1-mailinglist@lists.us.checkpoint.com
> Subject:	[FW1] Further Dual Nokias with VPN Questions
> 
> 
> *** Warning : this message originates from the Internet ****
> 
> 
> 
> Okay,
> So I've now been told again that I can do VPN with Dual Nokias.  Can
> anyone give me some pointers on what I am doing wrong?  If I try
> and do it all I get an error like. There are multiple gateways with
> overlapping encryption domains.
> 
> Soooo.  Are there any special settings I should be using?  Help!
> 
> Thanks in advance
> gregory
> 
> 
> 
> 
> ==========================================================================
> ======
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======
The Royal Bank of Scotland plc is registered in Scotland No 90312. Registered Office: 36 St Andrew Square, Edinburgh EH2 2YB.

The Royal Bank of Scotland plc is regulated by IMRO, SFA and Personal Investment Authority.

This e-mail message is confidential and for use by the addressee only.  If the message is received by anyone other than the addressee, please return the message to the sender by replying to it and then delete the message from your computer.

'Internet e-mails are not necessarily secure. The Royal Bank of Scotland plc does not accept responsibility for changes made to this message after it was sent.'



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================