Yes I noticed that in Watchguard doco <SNIP> The default settings on the SOHO for Phase 1 negotiations are DES, SHA1, and Diffie Helman group 1. These settings cannot be changed. Therefore, it is absolutely critical that the Check Point FireWall-1 is configured to use DES, SHA1, and Diffie Helman group 1 for this Phase of the negotiation. </SNIP>
I just wish that they had some documentation for current versions of both products. -----Original Message----- From: Geoff Brisbine [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 12, 2004 12:46 PM To: [EMAIL PROTECTED] Subject: Re: [FW-1] SOHO 6 VPN Looks like you're getting past it, but a quirk I had with a Watchguard SOHO (not a 6). The tunnel setting on the SOHO was only for the phase 2 setting. The Phase 1 setting of the SOHO is hard-coded to DES/SHA1, so I had to set the Phase 1 on the CP to that and it worked fine. -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Lane, James Sent: Tuesday, May 11, 2004 8:02 PM To: [EMAIL PROTECTED] Subject: [FW-1] SOHO 6 VPN Hi all, Just wondering if anyone has had any luck setting up a VPN between NG R55 and a Watchguard soho6 in simplified mode? I have tried all the things I've been able to find (disable nat, keying times etc) and have attempted to rework the interoperability guide from Watchguard to apply to new versions of both products, but to no avail. What I'm currently getting is a key exchange (main mode completion) but as soon as so as there's an encrypt action it's giving the ole no valid SA, interesting enough in those actions the dstkeyid is zeroed (0x00000000). Is there something I'm missing? James ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
