It's all ready set to "Sent in Clear". Do I still need the internal network in the encryption domain with this setting?
This is a Traditional VPN Configuration not the NG Simplified Configuration, would that make the difference. If this is the problem, are there any DOCS available for a migration to the Simplified mode. John Mailing list for discussion of Firewall-1 <[email protected]> wrote on 10/09/2005 10:10:21 PM: > John, > > There are two ways to fix this, one is to make sure that every network > that they could be coming from internally is in your encryption domain. > SecuRemote/SecureClient by default will not drop traffic for inside > encryption domain objects while disconnected, if it realizes that it's > inside the encryption domain. > or > The Easy way > You need to change the global property for Remote Access, VPN-Advanced > for SecuRemote/SecureClient behavior while disconnected to When > disconnected, traffic to the encyrption domain will be Sent in clear. > Prior to NGX the default was Dropped. > > > Compuquip TECHNOLOGIES > "Providing Solutions Since 1980" > > David Barker > Senior Security Engineer > Internet Security Division > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
