I had the same problem, here is how I solved it. Create the Service "CiscoVPN": CiscoVPN = UDP, Port 4500, Accept Replies, Match for 'Any'
Then make an outbound and inbound rule: Internal Client > Remote Cisco > Any Traffic > IKE,CiscoVPN,ESP > Accept Remote Cisco > Internal Client > Any Traffic > IKE,CiscoVPN,ESP > Accept (remember that the IKE service is the UDP one!) A pain but it worked! -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Baur Sent: Tuesday, April 18, 2006 3:44 PM To: [email protected] Subject: Re: [FW-1] Cisco VPN/CheckPoint FW I recently been having a problem trying to use a Cisco VPN client behind a Checkpoint firewall. I ensured that the access list will allow outbound and even opened to firewall to allow anything going outbound with no restrictions. I am using a hide address. Has anyone had issues with attempting this? Is there any sort of work around if its checkpoint related. Thank you for your time! Chuck Baur Network Administrator -----Original Message----- From: CHARLES BAUR Sent: Tuesday, April 18, 2006 2:17 PM To: Subject: Cisco VPN/CheckPoint FW ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
