Firewall-1

Re: [FW-1] SecureClient error - tunnel test (NGX R60)

Subject: Re: [FW-1] SecureClient error - tunnel test (NGX R60)
From: Ray <sixsigma44 AT HOTMAIL DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Tue, 28 Mar 2006 19:07:45 -0500
Are you using Office Mode? The error message says you should be because someone else with the same local IP adress is connected at the same time. Is that possible?

Ray

From: G³owacki S³awomir              <Slawomir.Glowacki AT ENERGA DOT PL>
Reply-To: Mailing list for discussion of Firewall-1 <FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] SecureClient error - tunnel test (NGX R60)
Date: Tue, 28 Mar 2006 17:16:37 +0200

Hello

I have a problem with SecureClient and Office Mode. Sometimes when the client connects to the gateway He gets information that connection is succesfull, but the communication doesn't work. Under Secure Client diagnostic we can see following error

"Tunnel test failure. Try to check "Force NAT traversal mechanism (UDP encapsulation)" checkbox. If the problem persist contact your system administrator"

Under Smart ViewTracker following:

Type:               Log

Action:             Login

Protocol:          udp

Service:            tunnel_test (18234)

Information: message: Same SecuRemote IP (behind a NAT device) detected. Allowing new user '<user>'. Consider using Office Mode.



UDP encapsulation checkbox is checked on SecureClient and on Gateway also.



When client disconnect, stop service and run again SecureClient he usually can connect and everything works fine.



The problem has appeared when we migrated from NG AI R56 (under R56 everythig was fine) to NGX R60. (HotFix 2 didn't solve the problem). I didn't fine in Secure Knowledge anything that helped.



Could somebody help me?







S³awomir G³owacki

CCSE




=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>