[FW1] SecuRemote Problem

[Bernard_Lee@Raytheon.com]

Hi all,

Any idea why line 3 of the following log is not encrypted. Seems like it went
thro' successfully the authentication and key is installed. And Rule 1 should
have enforced encryption.  Note blee belongs to group SRclient and destination B
is inside Encrypted_net.

Inter          Action    Src  Dst. Rule  User           Info
===       =====     ===  ===  ===  ====       ===

Daemon    authcrypt A         0    blee       reason clientencryption:
Authenticated by pre-shared secret scheme:    ISAKMP method: DES, ISAKMP, SHA1

Daemon    keyinstall     A    B    0               scheme: ISAKMP methods: AH:
SHA1 (Phase 2 Completion)

qfe2      reject      telnet A     B     22             len 44


Rule 1 :  SRclient@ANY   Encrypted_net   ANY       Client Encrypt      LONG
Gateway
Rule 22:  Any            Any             ANY  reject              LONG
Gateway

Thanks
Bernard




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================