Hi, the key-length of Check Point FireWall-1 depends on the version and license. They have 40-Bit DES as well as 56-Bit DES and 112-Bit 3DES. Regarding single DES Check Point FW-1 supports manual IPSEC and IKE with 56 Bit. You have to have the right version (VPN+DES or VPN+DES+STRONG) of the FW-1 and the license for it. Be sure to use the same protocols, algorithms and data integrity methods on both VPN endpoints. Hope it helps Best regards Matthias Janis Lacis wrote: > Dear Firewall List members ! > > I am having a problem trying to implement IPSec tunnel between CISCO IPSec > IOS and Checkpoint Firewal-1 V4.0. It turned out that CISCO has 56 bit DES > but Checkpoint has only 40 bit DES. > I looked at CISCO features in a IPSec enabled IOS and could not find any > possibility to use 40 bit DES ! Also I tried the 40 bit version of CISCO > IOS - no IPSec :-( > Anybody can advise - which versions of CISCO and Checkpoint are able to > interoperate ? > > -- Janis Lacis > Latvian Mobile Telephone > > - > [To unsubscribe, send mail to [EMAIL PROTECTED] with > "unsubscribe firewalls" in the body of the message.]
begin:vcard n:Leu;Dr. Matthias tel;cell:+49 172 8943533 tel;fax:+49 89 697 59 396 tel;work:+49 89 697 59 390 x-mozilla-html:FALSE url:http://www.aerasec.de org:AERAsec - Internet Services and Security adr:;;Eintrachtstrasse 1;Muenchen;;D-81541;Germany version:2.1 email;internet:[EMAIL PROTECTED] fn:Dr. Matthias Leu end:vcard
