RE: [FW1] Date: Fri, 25 Aug 2000 11:15:03 +1200

[Little, Craig (SSI-SIAP-NP5)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David,

I've had success using RRAS under version 4.0 and 4.1 SP1, over ADSL.
I had my ISP assign a permanent IP address to the DSL session, so I
could license the external interface. I know of one other person in
NZ who has had issues with getting the VPN to start correctly.

I have have some issues with getting the ADSL drivers installed
correctly, but I've found that the Chekpoint software installs
without a problem. We are using IKE / 3DES, and have had tunnels
working successfully using ADSL for the last 6 months.


Kind Regards,

Craig Little  BSc, CPD, CPI, SCJP, CCSA, CCSE
Inter-Networking / Security Consultant

Shell Services International

Phone:          +64 4 462 4661
Fax:            +64 4 463 4060
Mobile: +64 21 37 5858
mailto:[EMAIL PROTECTED]
http://www.shellservices.com



- -----Original Message-----
From: David Grimstone (DSLWN) [mailto:[EMAIL PROTECTED]]
Sent: Friday, 25 August 2000 12:03 p.m.
To: '[EMAIL PROTECTED]'
Subject: [FW1] Date: Fri, 25 Aug 2000 11:15:03 +1200



Hello

At phoneboy.com there is an article discussing Checkpoint with (R)RAS
connection to internet. It states

Known issues with this configuration: 
*       Any IPSEC-based encryption will probably not work (basically,
anything but FWZ). FWZ seems to work okay, however. 
*       Licensing: Either license your firewall to the internal IP address
or do not start FireWall-1 up until after RAS connects you to the
Internet
as FireWall-1 will complain about the license being invalid and not
start
correctly. 

Can anyone expand on the IPSEC issues? Basically I am trying to set
this up
with an ADSL PCI card as the RRAS interface. Any thoughts
appreciated.

David


======================================================================
==========
     To unsubscribe from this mailing list, please see the
instructions at
               http://www.checkpoint.com/services/mailing.html
======================================================================
==========

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBOaUgIskKSVawnurJEQLGjQCgjvi6xePJJbkGqDefRf5ItGS3tUsAninn
S5CowfptGNymJj2jONaZGwDX
=rRUB
-----END PGP SIGNATURE-----

Craig Little (E-mail).vcf