Don wrote:
>
> > I'm trying to set up SecuRemote, but when I connect to the site, the
> > message I get back is "Site says that it is not a Certificate
> > Authority".
> >
> > Do I *have* to have a CA/LDAP system for authentication, or can I get by
> > without it ? And if I can do without it, how can I configure
> > SecuRemote/FW1  to accept the connections.
> Depending on the version of CP you are running (Which you helpfully left
> out :)

I do like to set a challenge ... 4.1 SP5

> Your best bet is to simply enable FWZ encryption on that firewall
> module, generate they keys, and never use it again. SR will use this for
> encrypting the topology requests and it will not get used elsewhere. More
> recent versions of CheckPoint can do this through IKE.

This I have done, and I still had problems. However, this was due to our
ISP's router being a little overzealous in their ACLs. Via a dialup - no
problem at all.

Thanks.

Pete Dewell

>
> -Don
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================

--

Technical Support/Analyst
Volt Europe
Tel    : (+44) (0) 1737 774100
Fax    : (+44) (0) 1737 772949
Mobile : (+44) (0)  777 1513066
E-mail  [EMAIL PROTECTED]

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to