Firewall-1

Re: [FW-1] SecureClient error - tunnel test (NGX R60)

Subject: Re: [FW-1] SecureClient error - tunnel test (NGX R60)
From: Javier Hijas <jhijas AT GERMINUS DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 30 Mar 2006 10:45:32 +0200
Ensure you have conectivity between secureclient and smartcenter server.
 You also should ensure tunel_test traffic is arriving to the gateways.

Głowacki Sławomir wrote:
> Hello
> 
> I have a problem with SecureClient and Office Mode. Sometimes when the client 
> connects to the gateway He gets information that connection is succesfull, 
> but the communication doesn't work. Under Secure Client diagnostic we can see 
> following error
> 
> "Tunnel test failure. Try to check "Force NAT traversal mechanism (UDP 
> encapsulation)" checkbox. If the problem persist contact your system 
> administrator"
> 
> Under Smart ViewTracker following:
> 
> Type:               Log
> 
> Action:             Login
> 
> Protocol:          udp
> 
> Service:            tunnel_test (18234)
> 
> Information:      message: Same SecuRemote IP (behind a NAT device) detected. 
> Allowing new user '<user>'. Consider using Office Mode. 
> 
>  
> 
> UDP encapsulation checkbox is checked on SecureClient and on Gateway also.
> 
>  
> 
> When client disconnect, stop service and run again SecureClient he usually 
> can connect and everything works fine.
> 
>  
> 
> The problem has appeared when we migrated from NG AI R56 (under R56 everythig 
> was fine) to NGX R60. (HotFix 2 didn't solve the problem). I didn't fine in 
> Secure Knowledge anything that helped.
> 
>  
> 
> Could somebody help me?
> 
>  
> 
>  
> 
>  
> 
> Sławomir Głowacki
> 
> CCSE 
> 
>  
> 
> 
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
> 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>