Hi
We're talking about VPN-1 edges with the latest firmware and a NGX
R61_HFA01 Gateway/Management.
I have the following Situation: A central Gateway and some Edges (with
dynamic Adresses) living in a Star Community. The Traffic from beheind
the edges (their encryption Domains) goes perfectly through the VPN,
while the traffic originating directly from the edges does not.
In SmartDashboard, I have Network Objects for the edge's encryption
Domains. These Network Objects are used for manually defining the edge
encryption Domains.
A workarround is to replace these network Objects by group Objects,
containing the network Objects AND the edge Object. This seems ugly to
me, but it works.
Is there a better way? Is there a switch like "the gateway is allways in
the encryption Domain, or something like that?
--
http://schmidt.bs-server.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
