Tweaks/clarifications to this Q:

- Specifically, is it possible to do this using preshared secrets.  I'm
betting the answer is no.

- If it can't be done using preshared secrets, can this be set up using
certificates provided by the ICA to both sides, or do you have to go with
real-world purchases from Verisign/Thawte/etc., for each side;

- With all this brouhaha in mind, how on earth does an NG CP with a
simplified rulebase do a site-to-site VPN with a *non*-Check Point, yet
still IPSec-compliant, VPN device?

Thx,
---
Russell Washington, CCSE, CCSA, NCSA
Too many doggoned letters after my name.../


----- Original Message -----
From: "Russell Washington" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, January 09, 2003 10:54 AM
Subject: [FW-1] Simplified mode to Trad mode VPN?


One of my clients is using an NG-based Traditional rulebase and has to deal
with a number of other-platform VPNs.  So far so good until one of their
clients turned up NG with a simplified-mode rulebase.  Their client doesn't
know how to get the simplified rulebase to talk to a traditional mode NG
peer.

Of course, they didn't cover this scenario in training-- everyone is
*supposed* to use simplified mode right?  Yeah yeah yeah.  :)

Has anyone done this before and can you lend some insight?  The
traditional-mode end is easy, it's the simplified end we can't figure out,
since it *is* talking to another Check Point, but that Check Point obviously
isn't "working the way it expects" and hence the confusion.

Thx for any help...
---
Russell Washington, CCSE, CCSA, NCSA
Too many doggoned letters after my name.../

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to