View Single Post
  #1 (permalink)  
Old 2007-11-01
Producer Producer is offline
Junior Member
 
Join Date: 2006-02-23
Location: Cape Cod, MA
Posts: 14
Rep Power: 0
Producer has an average reputation (10+)
Default AT&T global network client Problems

This is a very interesting problem.

We have a client using the AT&T global network client.

They can not connect and I get this as an error on the FW. I replaced the IP's with descriptions.

Quote:
Number: 528053
Date: 1Nov2007
Time: 10:08:36
Product: VPN-1 Power/UTM
Interface: eth1c0
Origin: cchcfw2
Type: Log
Action: Drop
Protocol: 50
Source: INTERNAL CLIENT IP
Destination: cchcfwcluster (OUR EXTERNAL FIREWALL IP)
SmartDefense Profile: Default_Protection
Information: encryption fail reason: Packet is dropped because an IPsec SA associated with the SPI on the received IPsec packet could not be found
It looks like the client is trying to establish a VPN with our External IP and not the AT&T network.

Smart defense error? Nat problem? Encryption domain?

Thanks in Advance.
__________________
-Bradley
Reply With Quote