Install the strong service pack solves the problem in 99% of cases. For the other 1% that don't work you will have to re-install with the strong software.
-----Original Message----- From: Chris Arnold [mailto:[EMAIL PROTECTED]] Sent: 14 November 2001 15:19 To: [EMAIL PROTECTED] Subject: Re: [FW-1] VPN with DES AND 3DES It would appear that you purchased and installed a VPN Strong (3DES) license but have the VPN (DES) product installed. I assume that you will need to reinstall the product with VPN Strong support just as you would if you were adding encryption to a normal FW module. Chris -----Original Message----- From: LEFEVRE David [mailto:[EMAIL PROTECTED]] Sent: Tuesday, November 13, 2001 6:00 AM To: [EMAIL PROTECTED] Subject: [FW-1] VPN with DES AND 3DES Hello all, I've searched for documentation, but nothing. I've got the following problem : I have 2 firewalls with a 3DES license for VPN encryption. The first one accept to choose 3DES in the enxryption properties in my rules, the second one denies it. As the 2 machines are differents systems, I can not compare the 2 installations (one Linux / One solaris). On the solaris one, in the encryption properties I can only choose between CAST/DES/DES-40CP/Null and a "fw printlic -k" gives me a 3DES license. First question : does anybody know why I do NOT have 3DES in my choice list ???? Second question : each rule applies on a group of workstations, is it possible, with the same firewall based VPN, to have different encryption levels ??? I mean, is it possible to have : rule 1 : GRP-VPN-BASE / FAR-AWAY1 / Encrypt (DES) / Log / FW_for_VPN / every time rule 2 : GRP-VPN-BASE / FAR-AWAY2 / Encrypt (3DES) / Log / FW_for_VPN / every time in the same rulebase ? Thanks for all. Best regards -- David LEFEVRE CARDIF - Architecture et S�curit� Op�rationnelle [EMAIL PROTECTED] - T�l : 01 41 42 76 63 [EMAIL PROTECTED] - Tel : 01 41 42 24 22 =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html =============================================== =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html =============================================== =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ===============================================
