You do not need a static IP address....Hide works fine.... You have to specifically open the ports needed by the Cisco VPN client.....not just "any" service.
Please check Cisco web site about the ports that need to be open,,,,, Chuck Baur <[EMAIL PROTECTED]> wrote: I have called my ISP and checked to see if they some sort of IPSEC filtering going on but none was reported. I can VPN into the Pix firewall from any other location except here in which we are behind a checkpoint. Are there anything that I am missing that needs to be done. I have allowed any workstation to any service with no limits going outbound. Only thing I can think of and read online was something to do with my hide address being used vs. static address? -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Jeremy Lieb Sent: Tuesday, April 18, 2006 4:09 PM To: [email protected] Subject: Re: [FW-1] Cisco VPN/CheckPoint FW We usually attach a Static NAT to the internal address to get this to work. Though with NAT-T and Cisco I've seen it work without needing to use Static nat. Jeremy Lieb CCSE-NG CCSE+NG Firewall Administrator Open Text Corporation 100 Tri-State Int'l Pkwy Third Floor Lincolnshire, IL 60069 -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Baur Sent: Tuesday, April 18, 2006 2:44 PM To: [email protected] Subject: Re: [FW-1] Cisco VPN/CheckPoint FW I recently been having a problem trying to use a Cisco VPN client behind a Checkpoint firewall. I ensured that the access list will allow outbound and even opened to firewall to allow anything going outbound with no restrictions. I am using a hide address. Has anyone had issues with attempting this? Is there any sort of work around if its checkpoint related. Thank you for your time! Chuck Baur Network Administrator -----Original Message----- From: CHARLES BAUR Sent: Tuesday, April 18, 2006 2:17 PM To: Subject: Cisco VPN/CheckPoint FW ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= --------------------------------- Talk is cheap. Use Yahoo! Messenger to make PC-to-Phone calls. Great rates starting at 1¢/min. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
