Article View: comp.security.firewalls
Article #374Re: checkpoint secure client VPN-1
From: Chris
Date: Thu, 15 Apr 2004 08:05
Date: Thu, 15 Apr 2004 08:05
40 lines
2821 bytes
2821 bytes
"Chris Moore" <nospam@myaddress.com> wrote in message news:Mulfc.5010$fq4.3367@lakeread05... > I have the following problem: > > When PC's with the SecureClient are on the LAN the software reverts to the > Default policy and the firewall blocks all traffic coming to it i.e. I > cannot ping the clients nor push my Antivirus installations, access shares, > etc. > > If I Disable the default policy i.e. no protection, everything works fine > > If I log in from an external internet connection then I get the personalised > policy loaded and everything works fine as it should. > > How can I get the clients to behave properly on the LAN so they are > accessible for management purposes. Why do they not default to the policy > server and use the personalised policy, why do they use the default and > block everything?? > > I have setup as far as I know correctly the FW and client software - have > followed the VPN client install guide from the Checkpoint site. > > Any advice would be greatly appreciated!!! > > Checkpoint Firewall 1 NG FP3 > Checkpoint SecureClient various builds all with the same issue > > Thanks > > Chris > Are you saying that your clients are on a LAN behind the firewall and have SecureClient active? Why would you use SecureClient on the LAN? Chris.
Technical Details
Message-ID:
<KkudnYotZMDE3-PdSa8jmw@karoo.co.uk>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news.kjsl.com!HSNX.atgi.net!cyclone-sf.pbi.net!216.196.106.144!border2.nntp.sjc.giganews.com!border1.nntp.sjc.giganews.com!nntp.giganews.com!local1.nntp.sjc.giganews.com!nntp.karoo.co.uk!news.karoo.co.uk.POSTED!not-for-mailReferences:
<Mulfc.5010$fq4.3367@lakeread05>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,45fc92d64770592b X-Google-Attributes: gidf922c,public X-Google-Thread: fc559,45fc92d64770592b X-Google-Attributes: gidfc559,public X-Google-ArrivalTime: 2004-04-15 01:05:46 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news.kjsl.com!HSNX.atgi.net!cyclone-sf.pbi.net!216.196.106.144!border2.nntp.sjc.giganews.com!border1.nntp.sjc.giganews.com!nntp.giganews.com!local1.nntp.sjc.giganews.com!nntp.karoo.co.uk!news.karoo.co.uk.POSTED!not-for-mail NNTP-Posting-Date: Thu, 15 Apr 2004 03:05:45 -0500 From: "Chris" <chris@domain.com> Newsgroups: comp.security.firewalls,cp.products.firewall-1 References: <Mulfc.5010$fq4.3367@lakeread05> Subject: Re: checkpoint secure client VPN-1 Date: Thu, 15 Apr 2004 09:05:42 +0100 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Message-ID: <KkudnYotZMDE3-PdSa8jmw@karoo.co.uk> Lines: 42 NNTP-Posting-Host: 213.249.145.35 X-Trace: sv3-p0CGYiWullg5uRYpbJNFpd9UZv+aVP81vYq58xOTO21BeUJLYe65jiJdsTIUBbZDQMlJsh6NNHYtNLZ!u+EPlMbN0tM0uBy4wJnob/qB/ceDZQmsKcdsydmZOS9HeRzX5gRuTUwNQWwWrR2XWoMj1pvekTVn X-Complaints-To: abuse@karoo.kcom.com X-DMCA-Complaints-To: abuse@karoo.kcom.com X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.1