Hello to all, I solve my problem,
Thanks to all that help me Ricardo Marques -----Original Message----- From: Marco Supino [mailto:[EMAIL PROTECTED]] Sent: quarta-feira, 20 de Novembro de 2002 14:34 To: Marques, Ricardo Subject: Re: SecureClient and RSA ACE/Server (SecurID) Ok, I have had the same problem, to try to debug do this : clear the "Send node Secret" in the Client tab of the firewall in the SecurID config, and try authenticating from the Firewall (not a regular client), this should recreate the secret file on the firewall, and if it does what i hope it will do, you will be authenticated in the first time, but all the next times will fail, also check your "secondary nodes" that they are correct, they should contain the INTERNAL interface of the firewall talking with the SecurID server, the "Network address" (in the main window) should have the VALID external IP of the firewall. let me know Marco. "Marques, Ricardo" wrote: > > They are both Windows 2000 with SP3 > > Ricardo Marques > > -----Original Message----- > From: Marco Supino [mailto:[EMAIL PROTECTED]] > Sent: quarta-feira, 20 de Novembro de 2002 14:27 > To: Marques, Ricardo > Subject: Re: [FW-1] SecureClient and RSA ACE/Server (SecurID) > > What platform are you working on ? (the FW and SecureID) > > Marco. > > "Marques, Ricardo" wrote: > > > > Hello Marco, > > > > Thank you for your help, > > > > This is what i get: > > > > I can not validate users with RSA ACE/Agent installed on firewall-1. This > is > > what i see in the online reports of RSA ACE/Server: > > > > (without creating a host for fw1) > > > > -------/10.100.2.253 ------->/ > > agent host not found ace > > > > (creating a host for fw1, before activating user on it) > > > > teste2/fw1 ------->/ > > user not on agent host ace > > > > (creating a host for fw1, after activating user on it) > > teste2/fw1 00073038685/teste teste > > ACCESS DENIED, passcode incorrect ace > > > > I had tried several times, and the passcode is correct. If i try it from > RSA > > ACE/Agent installed on RSA ACE/Server machine it works fine. The first > time > > it asks for a pin conde, i enter the pin code, then i enter the pin code > > with the new passcode, and it always work fine. > > > > In the firewall side i have tested with two users: one that have been > tested > > from the RSA ACE/Server side, and one that had never been tested, none of > > them works. > > > > Thank you again, > > Ricardo Marques > > > > -----Original Message----- > > From: Marco Supino [mailto:[EMAIL PROTECTED]] > > Sent: quarta-feira, 20 de Novembro de 2002 14:20 > > To: [EMAIL PROTECTED] > > Subject: Re: [FW-1] SecureClient and RSA ACE/Server (SecurID) > > > > Hi, > > > > i am runnign FP3 and had 4.1 with ACE 4.1 working fine, i know it can > > make you crazy to make it work, let me know what you do, i will try to > > help, > > > > "Marques, Ricardo" wrote: > > > > > > Hello all, > > > > > > Does anyone ever put this to work: RSA ACE/Server 5 (SecurID) and > > > SecureClient? > > > > > > When i test the authentication from the RSA side it works fine, when i > > test > > > it from the firewall side, i receive a message "ACCESS DENIED wrong > > > passcode" > > > > > > Any ideas how to solve this? > > > > > > THanks in adavance, > > > Ricardo Marques > > > > > > ================================================= > > > To set vacation, Out Of Office, or away messages, > > > send an email to [EMAIL PROTECTED] > > > in the BODY of the email add: > > > set fw-1-mailinglist nomail > > > ================================================= > > > To unsubscribe from this mailing list, > > > please see the instructions at > > > http://www.checkpoint.com/services/mailing.html > > > ================================================= > > > If you have any questions on how to change your > > > subscription options, email > > > [EMAIL PROTECTED] > > > ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
