>From my personal, mutual site-to-site vpn between Checkpoint and other vendors
>do NOT
work too well. I've tried between CP NG with AI and NGx with Cisco IOS/Pix
firewall with
external certificate such as Microsoft CA Server and the site-to-site VPN
does not work.
I've called up both CP and Cisco TAC and they told me that this is a
non-supported
configuration, go figure.
I've successfully setup site-to-site VPN between Checkpoint firewalls with
Microsoft CA
Server. I've also successfully setup site-to-site between Cisco IOS and
Cisco Pix firewalls
with Microsoft CA Server. The VPN will work if both ends are of the same
vendors.
Even if you get it working, you may be the only person ending up supporting
it.
Yann Roger <yroger AT NETCOURRIER DOT COM> wrote:
Hi all,
I want to build a VPN connection (site-to-site) between my CheckPoint NGX R60
and an IP filter gateway. Mutual authentication will be done through
certificate.
So, how do I generate a certificate for the IP filter ?
Do I need to use the ICA Management tool, or is it only for managed gateway ?
Thanks in advance for any answer,
Yann Roger
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
---------------------------------
Any questions? Get answers on any topic at Yahoo! Answers. Try it now.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
