hi, you can have both - the existing profile with nat-t and visitormode.
br reinhard -- Reinhard Stich, Internet Security AG Mobile email powered by Nokia Intellisync -----Ursprüngliche Nachricht----- Von: john maverick Gesendet: 10.08.2007 21:56:39 An: john maverick;[email protected] Betreff: Re: [FW-1] Visitor mode -help Thanks..i guess i was misunderstood ....i know that there wudnt be a need for Ipsec NAT t after Visitor...my concern was If we had a 200+ non technical user base ..is there a way to stagger visitor mode ..ie have some working on NAT T until we get them to change to visitor mode In short if my gateway supports Visitor mode and i ahev a connection profile ..will a Non visitor mode be able to connect or we wud have to enable vsiitor mode on server and at ONE SHOT have all our users delete their NAT T profiles and have them go on SSL Our concern was from a deployment nightmare perspective Thanks and appreciate help On 8/10/07, sin <[EMAIL PROTECTED]> wrote: > > john maverick wrote: > > Hi, > > > > We are planning to migrate our Secureclient to use visitor mode > > > > until now all the secureclient have option to support Nat traversal > > > > From the onsite doc is it right if we presume > > > > 1)Once visitor mode is enable in gateway ...all the secureclients will > be > > forced over 443(if we select that) and they cannot use the ipsecnat > > traversal profile anymore ???? > > > > visitor mode uses SSL to tunnel the ipsec traffic, so there is really no > need for nat-t support for ipsec in the profile of the client. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
