I have got it working after a lot of trial and error.

The key seem to be getting the list of installed products right on the
firewall onbject first. Then also making sure in the NAT section of the
object that you enable pool nats for SecuRemote - assuming you are using
pools.

I am using certificates on the client which is win2000.

Rules required were

any  firewall-module    IKE    accept
firewall-module  any    IKE    accept
any firewall-module     fw_topo, ica_service, tunnel_test  accept

Other than that it was a question of making sure the encryption algorithum,
authentication and hashing were are configured correctly.

If you want any more specific details then post your questions.

regards

Dave.



This message was checked by MailScan for WorkgroupMail.
www.workgroupmail.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to