This is a side affect of doing this in a single rule, split it into two rules, and it will work much better.
Ted On Mon, 2003-03-31 at 09:08, Covington, Chris wrote: > Hi, > > It seems that if I create a single site-to-site encrypt rule from a > group (containing multiple networks, VLANs) and to a single external > private network such as: > > Source: Destination: Service: Action: > Group_A Network_B Any Encrypt > Network_B Group_A > > NG FP3 HF2 interprets this as try to encrypt among the different VLANs > within Group_A as well as encrypt between Network_B and Group_A. The > problem is all the networks in Group_A are in my LAN, so obviously they > shouldn't be encrypted. I only want traffic from Group_A (my VLANs) to > Network_B (external private LAN) to be encrypted. > > What's the proper way to create a rule for this? Should I be creating 2 > groups? > > thanks, > Chris > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= -- Ted Serreyn Serreyn Network Services, LLC http://www.serreyn.com/ ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
