Hi, The eval license is OK. IT has ALL available features, so you can rule out licensing. Did you try to create your VPN again on both firewalls. I've had the same problem before and created the vpn between my to firewalls again. Including new SPI's (I used manual IPSEC) and rules. Try this and reinstall your policy on your London and Riyadh firewalls. Good Luck !) Danny Kruitbosch RDC Datacentrum The Netherlands "Haji, Mohmed" schreef: > Hello everyone, > > We have 2 VPNs in our Company. > > 1) From London to Riyadh (which we are having problems with) > 2) From London to Dubai (which is fine) > > The Riyadh firewall was powered down suddenly due to admin problems with our > offices in Riyadh. It was off-line for about a month but has now come > on-line again. > > I reinstalled the latest policy onto Riyadh and have checked System Status > Monitor and all looked to be OK. > > They are able to successfully connect to machines outside the encryption > domain but not to machines inside it (i.e. they could make VPN connections > but not non-VPN connections). NB The VPN was working fine before the > powerdown. > > I checked the firewall logs and saw that the traffic from London - Riyadh > was OK. > > The traffic from Riyadh to London wasn't. I saw lots of key installs and > encrypts BUT NO DECRYPTS. This is obviously the reason why it isn't working. > > WHY IS NOT DECRYPTING THE DATA? > > I think I should point out that Dubai is properly licensed but Riyadh is > relying on an eval licence. The Dubai licence has the features encul, > vpndes, pfm > > Riyadh has an eval licence with the following features: controlx pfmx oseu > vpndes connect motif embedded ram1 srunlimit > > Our Tech Support insist that although Riyadh doesn't explicitly have encul > and pfm, the pfmx licence it does have includes both these features. Is this > correct ? ( I think it may the licences that are preventing the firewall > > Thanks to everyone in advance. > > Kind regards, > Mohmed Haji > Information Systems - Logica UK Ltd > tel: +44 020 7446 2112 > fax: +44 (0)20 7468 7008 > > ================================================================================ > To unsubscribe from this mailing list, please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================================================
begin:vcard n:Kruitbosch;Danny tel;work:+31(0)20 5497913 x-mozilla-html:FALSE url:www.rdc.nl org:RDC DataCentrum B.V.;Netwerk Ontwikkeling adr:;;Postbus 74707;Amsterdam;;1070 BS;Nederland version:2.1 email;internet:[EMAIL PROTECTED] x-mozilla-cpt:;0 fn:Danny Kruitbosch end:vcard
