Is 'Exportable for SecuRemote' enabled on all clustered servers ?
Does the userc.C file actually get downloaded ?
There is limited checking of this file when it is downloading - invalid
entries mean the whole site that they belong to is removed before the file
is loaded.
Could you post the :topology section of the file up ?
Of course the error message could always be true, and there is some partial
overlap with your encryption domains.
Are there any multihomed hosts ?
Your encryption domain network group should also include the gateways, as
well as the networks they protect.
Tim
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: 27 March 2001 12:16
Subject: [FW1] partially overlapping enycryption domain
>
> I have a Stonebeat HA Cluster with a seperate management station. Both
> GatewayObjects are configured to use the same Network Object as encryption
> Domain. However, when SecuRemote tries a topology- download from the
> management console it says that the site xyz has at least two gateways
with
> a partially overlapping encryption domain.
>
> This is NOT true !! The encryption Domain is fully identical on both
> Gateways. Does anyone know how to fix this ?
>
> Joerg Fritsch
> Systemspezialist Internetdienste
>
> tesion )) Telekommunikation
> Kriegsbergstr.11
> D-70174 Stuttgart
> Telefon: +49 (0) 711 / 2021 - 793
> Telefax: +49 (0) 711 / 2021 - 93 - 793
> E-Mail: [EMAIL PROTECTED]
>
>
>
>
>
============================================================================
====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
