hi,

when working with office mode or IP pool NAT you have to be sure that the IPs used for that are routed back through your firewall. so please check of you do a "traceroute" from your internal network to one of these IPs that it tries to go through the firewall

br
reinhard

At 01:56 24.06.2008, you wrote:
Hello guys,

I have a little problem. This is my first time creating a soluction to prove SecureClient acess in my company (Already made with SecureRemote).

Well, let´s explain. I have two IP560 working in cluster mode. I created a VPN domian, rules, users and all what I need to make a RemoteAccess server. This works fine.
The problem happen.

The problem happen when I enable the OfficeMode. With this option enable, the client receive a IP address from my pool. All works fine at this moment. But when I try to access a host in my encryption group, I don´t get any answer from remote host.

Looking the log, all connections bypass without problems at firewall gateway. But there is no answer. Very strange this, because it works fine with OfficeMode disable.

I´m tried using a NAT pool, but no success. There is no error in log. All works fine. The NAT work fine.

Someone have a tip to solve this?

Thanks in advance.


_________________________________________________________________
Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy!
http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us


Scanned by Check Point Total Security Gateway.


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

--
Reinhard Stich          [EMAIL PROTECTED]
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333

Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to