 Re: Problems Creating VPN's Between NG With Application Intelligence and PIX VPN's
The other alternative solution is to modify the $FWDIR/lib/user.def file
and list exactly what you have in your local Encryption Domain. You will also
need to disalbe "IKE_largest_possible_subnet" to false via gui-dbedit. That
will prevent checkpoint from suppernetting.
HTH |