Firewall-1

Re: [FW-1] VPN SecureClient : IP flows to a new internal network not enc

Subject: Re: [FW-1] VPN SecureClient : IP flows to a new internal network not encrypted in the VPN tunnel
From: Hugo van der Kooij <hvdkooij AT VANDERKOOIJ DOT ORG>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Fri, 18 May 2007 23:43:41 +0200
On Fri, 18 May 2007, Joel Guillerm wrote:

Checkpoint NG R55, Nokia IPSO 4.1,  SecureClient R56 ;

VPN tunnel is established correctly from the SecureClient PC ; IP address
is correctly affected to the PC ;
everything has been working OK for a while ;

now, we wants to give access to a new internal LAN network ;
so, we defined it everywhere where it is needed (new object, added to the
Group of other existing internal LAN networks and to the AntiSpoofing
Group, update of the Nokia routing table) ;
the firewall can reach this new network locally, and from this new
network, we can reach DMZ or Internet resources the same way we can from
the other existing internal LAN networks ;

Did you add it to your RemoteAccess Encryption Domain? And did you update the site on the client after you installed the policy?

Hugo.

--
        hvdkooij AT vanderkooij DOT org http://hugo.vanderkooij.org/
            This message is using 100% recycled electrons.

        Some men see computers as they are and say "Windows"
        I use computers with Linux and say "Why Windows?"
                (Thanks JFK, for the insight.)

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>