Issue this commands and see if this will help:ca zero rsaca gen rsa key 512This should regenerate the rsa public/private key

It means the concentrator is receiving the initial message again. It may have been caused by a vpn client retransmitting but not receiving back response from the concentrator.

enable split tunnellingvpngroup groupname split-tunnel 80This attribute will be pushed to the clients.

1. The following should be open on the Checkpoint. Protocol 50 (esp) Protocol 51 (ahp) UDP port 500 (isakmp) 2. Pix Ipsec will not work if its peer address is port translated (PAT). 3. debug crypto isakmp sa debug crypto ipsec saboth debug...

Pix default passwords are cisco,pix or just blank. Try this first.For initial configuration you will need to console to the pix. On a Windows 2K, you can use start>Programs>Accessories>Communications>Hyperterminal.Port settings is 9600,8,None,1.Proce...