If you are on R55 HFA05 through HFA08, this is a known problem. It was fixed
in HFA09.
Ray
From: Charalambos Klitiropoulos <[EMAIL PROTECTED]>
Reply-To: Mailing list for discussion of Firewall-1
<[email protected]>
To: [email protected]
Subject: Re: [FW-1] IKE: Informational Exchange Send Delete IPSEC-SA to
Peer: 442e9bf1
Date: Fri, 10 Jun 2005 21:03:33 +0300
I have seen such messages when SecureClient users on dial-up connections
were dropping the dial-up connection before disconnecting from
SecureClient.
This is just a message that VPN-1 deleted the old SA for that user in order
to create a new one. In my case it was happening because the users were
getting a different IP address from their ISPs each time they were
connected.
On 6/7/05, access-list <[EMAIL PROTECTED]> wrote:
>
> here's a new one (for me) I have secure client (ngai r56) user who
> frequently gets disconnected from our splat multicast cluster (r55). I
> have seen in the past users get prompted for authentication as their
> home wireless signal switches between their own and their neighbor's
> signal. Anybody have an idea why this is being generated?
>
> regards,
> steve
>
> Number: 244457
> Date: 1Jun2005
> Time: 23:17:11
> Product: VPN-1 & FireWall-1
> Interface: daemon
> Origin: lx76fw02 (x.x.x.x)
> Type: Log
> Action: Key Install
> Source: lx76fw02 (x.x.x.x)
> Destination:
pcp03084887pcs.glst3401.nj.comcast.net<http://pcp03084887pcs.glst3401.nj.comcast.net>
> (x.x.x.x)
> User: lipc1
> Encryption Scheme: IKE
> VPN Peer Gateway:
pcp03084887xxxxxxomcast.net<http://pcp03084887xxxxxxomcast.net>(
> 68.46.155.241 <http://68.46.155.241>)
> IKE Initiator Cookie: de25exxxx8b36d20
> IKE Responder Cookie: 2bbxxxfbd1b7
> IKE Phase2 Message ID: 77b07635
> Information: IKE: Informational Exchange Send
> Delete IPSEC-SA to Peer: 442e9bf1
> SPI: de25ec31
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
