Seems to me that interoperable simply means they can work together. It
doesn't necesetate the fact that this means that the VPN's should be able to
talk, or am I wrong ?
If your labs have tested the VPN interoperability (From what I read on the
page you offered you checked user-VPN and not VPN to VPN it seems) between
the various FW's, I would be interested in hearing how you got it to work.
We'r also considering a dual setup of this sort, using the 1000 models or
the 500, but we did not intend to VPN tunnel between the CP and the NS since
we were also told it can't be done at this point.
Mike
> -----Original Message-----
> From: Al Potter [SMTP:[EMAIL PROTECTED]]
> Sent: � ���� 02 2001 23:45
> To: Michael DeSimone
> Cc: [EMAIL PROTECTED]
> Subject: Re: VPN between Checkpoint FW1 and Netscreen 100
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Content-Type: text/plain; charset=us-ascii
>
>
> [EMAIL PROTECTED] said:
> > I need to create a VPN between a Netscreen 100 and CP FW1 on Solaris.
> > I am more intrested in the results of previous attempts then anything
> > else. Netscreen says this is unsupported but I do not see why it
> > should not work.
>
> Neither can I, since they both have products certified by our labs to be
> interoperable. Please pay close attention to the version numbers and
> patch or
> service pack levels, as appropriate, and refer to:
>
>
> http://www.icsalabs.com/html/communities/ipsec/lab/notes/NetScreenOS.shtml
>
> where you will see that the Netscreen 100 was tested and found to be
> interoperable with both Checkpoint on Sun Solaris and Windows NT.
>
>
> Please refer to:
>
> http://www.icsalabs.com/html/communities/ipsec/index.shtml
>
> for information about our IPSec certification program, including links to
> a
> listing of certified interoperable products.
>
>
> Hope this helps.....
>
>
> DISCLAIMER: My company (ICSA Labs) tests and certifies IPSec and other
> products; I manage the lab that actually tests IPSec.
>
> AL
> - --
> +--------------------------------------------------------------------+
> | Al Potter Manager, Network Security Labs |
> | apotter at-yay icsa ot-day net ICSA Labs |
> | (If the spambots learn piglatin...) |
> | PGP Key: 0x58C95451 http://www.icsalabs.com |
> | PGP Fingerprint: D3 1D BE 8C B5 DD 12 61 5A 4A 65 32 93 E5 D9 36 |
> +--------------------------------------------------------------------+
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.6 (GNU/Linux)
> Comment: Exmh version 2.2 06/23/2000
>
> iQCVAwUBO0DrUduN3h5YyVRRAQKA8gP/alOb29Vxv7UEMfKH5fiyar7/klyaQW0t
> cZ+SO+FZqFZqX94HN/pHzTIeQZVKQDfIX4Dg829CkfkRQlDVGUygdrlhZKap5/sI
> awTvmNVluRfrapKDGHOHIWkvb7vft5vUMOHY3sZcMdLnRUkjVYKfaK49V83IKiL5
> ZOOOV0tJlAk=
> =ZZq0
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Firewalls mailing list
> [EMAIL PROTECTED]
> http://lists.gnac.net/mailman/listinfo/firewalls
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
