At 14:37 21.11.2007, you wrote:
I agree Reinhard,
but ip proto 50 between the gateway A and B the internal ip are
covered behind that ( in plus the client are on private networks)!!
Did you use tcpdump or fw monitor?
I use tcpdump because I know that on ipso I see the really outgoing traffic.
on splat you might see the packet before it's encrypted.
And yes I can see the encrypt/decript action by the log this is what
I did not understand...
can you sniffer somewhere on the wire?
br
reinhard
--
Reinhard Stich [EMAIL PROTECTED]
Internet Security AG, 1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
