checkpoint secure client VPN-1

Article View: comp.security.firewalls

Article #373

Back to comp.security.firewalls Previous Next

#373

From: Chris Moore
Date: Thu, 15 Apr 2004 01:26

28 lines
2026 bytes

I have the following problem:

When PC's with the SecureClient are on the LAN the software reverts to the
Default policy and the firewall blocks all traffic coming to it i.e. I
cannot ping the clients nor push my Antivirus installations, access shares,
etc.

If I Disable the default policy i.e. no protection, everything works fine

If I log in from an external internet connection then I get the personalised
policy loaded and everything works fine as it should.

How can I get the clients to behave properly on the LAN so they are
accessible for management purposes.  Why do they not default to the policy
server and use the personalised policy, why do they use the default and
block everything??

I have setup as far as I know correctly the FW and client software - have
followed the VPN client install guide from the Checkpoint site.

Any advice would be greatly appreciated!!!

Checkpoint Firewall 1 NG FP3
Checkpoint SecureClient various builds all with the same issue

Thanks

Chris

Technical Details

Message-ID: <Mulfc.5010$fq4.3367@lakeread05>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!news.glorb.com!cox.net!news-xfer.cox.net!p01!lakeread05.POSTED!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,45fc92d64770592b,start
X-Google-Attributes: gidf922c,public
X-Google-Thread: fc559,45fc92d64770592b,start
X-Google-Attributes: gidfc559,public
X-Google-ArrivalTime: 2004-04-14 18:23:56 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!news.glorb.com!cox.net!news-xfer.cox.net!p01!lakeread05.POSTED!not-for-mail
From: "Chris Moore" <nospam@myaddress.com>
Newsgroups: comp.security.firewalls,cp.products.firewall-1
Subject: checkpoint secure client VPN-1
Lines: 30
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Message-ID: <Mulfc.5010$fq4.3367@lakeread05>
Date: Wed, 14 Apr 2004 21:26:38 -0400
NNTP-Posting-Host: 68.100.197.130
X-Complaints-To: abuse@cox.net
X-Trace: lakeread05 1081992236 68.100.197.130 (Wed, 14 Apr 2004 21:23:56 EDT)
NNTP-Posting-Date: Wed, 14 Apr 2004 21:23:56 EDT
Organization: Cox Communications