topic Re: CheckPoint Client through PIX in Network Security

CheckPoint Client through PIX

beac.kunkelwo — Fri, 21 Feb 2020 06:59:39 GMT

We have a company which use the Pix as VPN Server. Now we have to connect an internal PC to CheckPoint FW with the SecureRemote Client.

We sniffered the intern and extern site of the Pix with following results:

the client update to the remote site is ok; we see

IKE pakets inside in both directions.

If we try a ping to a remote server , icmp is encapsulated in UDP with dest 2746, the reply reaches the outside of the PIX but not to the inside.

For testing we opened the access-lists but with no success.

Any suggestions ?

Wolfgang

Re: CheckPoint Client through PIX

jmia — Tue, 16 Sep 2003 13:20:52 GMT

Hi Wolfgang,

Check these documents and see if it helps your situation...

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008009420f.shtml

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800ef796.shtml

Thanks - Jay

Re: CheckPoint Client through PIX

beac.kunkelwo — Tue, 16 Sep 2003 13:42:24 GMT

sorry, I preferre the gateway/gateway connection too.

But the customer requires a VPN connection from the inside PC with the SecureRemote Client through the PIX to a CheckPoint FW.

Thanks

Wolfgang

Re: CheckPoint Client through PIX

tkpsimon — Tue, 16 Sep 2003 21:04:42 GMT

Hi, Just wanted to make sure, is you client behind PAT or static NAT? does the Checkpoint on the other side support NAT-T? what FP is the checkpoint using, you might want to check that.

I would try to give this PC a static NAT translation, and create ACL for it!