 Re: Site-to-Site VPN with Cisco PIX
This is Checkpoint you are dealing with...remember they followed a standard unlike Cisco. Cisco thinks they own the world of networking and they are quite wrong. That being said...since you're trying a site to site tunnel and I see no mention of a manager here you might take a look at the timeout setting for the VPN. Cisco set their default differently then the rest of the industry and CP has always had trouble with VPN's to Cisco unless these are matched up. This would be much easier BTW if you were using the smartcenter to manage the Edge box. That would elimninate the issue of the encryption domain you mentioned and allow you to define as much as you like behind the Edge. |