VPN client problem when going through CheckPoint Safe@Office

[orovanziv]

Hi,

I have a situation which I need to connect Cisco VPN client to PIX 515e but on the way, I have to go through Check Point Safe@Office 225 (V. 4.0.73x).

I opened ESP and UDP 500 in the CP FW but still I can't get the client to connect to the PIX.

I know for sure that the client and the pix are correctly configured (If I bypass the CP FW, I can initiate the VPN).

Please advise,

Shai P.

[a.alekseev]

On your pix you need enable "isakmp nat-traversal"

On the client use IPSec over UDP

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a0080423178.html#wp1052899