 SecureClient working with NGX
Hi, I'm after help with a problem of SecureClient working to firewalls installed with NGX. Remote users were working ok to NG_AI but failed once the firewalls were upgraded to NGX. When reverted back to NG_AI access ok again.
Subsequent testing implied that the problem was with the IKE Phase1 key exchange (default using UDP 500). The SecureClient diagnostics showed the failure, with an error 108.
Also we found that the problem only occued if the firewall was a member of a cluster object. If used as a single firewall object it worked ok. It also worked as a cluster member if IKE over TCP was used. The NGX fix has been applied to both the management server and firewall.
Checkpoint is running on Nokia's using ipso 3.9 |