View Single Post
  #1 (permalink)  
Old 2008-02-01
TonyR TonyR is offline
Junior Member
 
Join Date: 2008-01-31
Location: Leeds, United Kingdom
Posts: 1
Rep Power: 0
TonyR has an average reputation (10+)
Send a message via MSN to TonyR
Default SecuRemote on 3G Internet Connection

Firstly, apologies for the length of this post.

The directors at my office use a Vodafone 3G connection for VPN access whilst out of the office.

They're experiencing a problem whilst travelling on trains - this being that as the 3G connection moves from cell to cell, the client IP address changes. Each time this happens, SecuRemote requests the users password again. Now, I realise this is probably by design, as of course if the client IP changes, then the firewall / SecuRemote must assume a new connection has been made.

My question is; does anybody know a way around this? I thought about using a certificate without a password, but I feel that is perhaps too insecure. I really would like to retain the user / password challenge.

Also, would SecureClient be any better? We don't have any SecureClient licences (and not in a position to purchase any!) but I understand that SecureClient can be used for free, but without desktop policies.

I cannot see this making any difference though, as each time the IP address changes, a new connection is initiated, so I would surely expect the firewall to request authentication.

I am desperate here, as I am under considerable pressure to get this resolved.

Finally the all important versions:
Check Point VPN-1(TM) & FireWall-1(R) NGX (R62) - Build 120
SecuRemote NGX R60 (build 191)

Thanks for reading.
Tony.

Last edited by TonyR; 2008-02-01 at 01:42.
Reply With Quote