Hi ALL,
I have this problem width the authentication by SecurID,
from other client authentication correctly performed, but from
FireWall-1, I receive the:
Error in the FireWall log
Error: "Access denied by SecurID"
Error on client
Error: "Access denied for user ace-test by SecurID"
Error on Ace Server Log
Error: "Passcode incorrect"
in the checkpoint knwoledgebase i have find this (find it above),
but the solution provided is totally incorrect, and the problem persist!
there is someone that has met the same problem?
thanks in advance.
Massimo.
-----------------------------------------------------------------
Solution: Error: "Passcode incorrect" on Ace Server Log ()
On the SecurID server, try defining the FireWall client with another
one of the
FireWall's IP addresses - the one used as the source address when the
FireWall
sends packets to the SecurID server.
Problem Description
Error: "Passcode incorrect" on Ace Server Log
Error: "Access denied for user <username> by SecurID"
Error: "Access denied by SecurID" on FireWall Log
-----------------------------------------------------------------
Solution: SecurID authentication fails ()
On the SecurID server, define the FireWall client with FireWall's
Internal IP
addresses, i.e. the one used as the source address when the FireWall
sends
packets to the SecurID server.
Problem Description
SecurID authentication fails
SecurID authentication fails through the FireWall with User or Client
Authentication
Error in the FireWall log
Error: "Access denied by SecurID"
Error on client
Error: "Access denied for user ace-test by SecurID"
Error on Ace Server Log
Error: "Passcode incorrect"
Cause of this problem:
This error condition can occur when the authentication packets coming
from the
FireWall have a different source IP address than the one used to
identify the
FireWall-1 on the SecurID server clients list.
-----------------------------------------------------------------
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
