SecureClient Authentication Issues

[Simon_Young]

Hi, im hoping someone can help me here...

I have a issue with authenticating some of my home workers to the server

Although some users are connecting and logging in prefectly well, there are 3 that are failing.

I've trieds lots of things, reinstalling the secure client software, generating new certificates, even creating brand new users, then intalling the policy, but for some reason, when i copt the certificate to the laptop and try to create the site, it wont connect for authentication purposes.

In the client configuration, i can create the site with my IP address, it connects to that and when i chose 'certificate' as the authentication type, pick the certificate, and put in the passwrd, it just sits there saying its getting data from the site, but the fails saying it can't communicate

If i chose not to use a certificate, and use the username and password option, it will contact the site, i will get the screen showing the Internal CA fingerpring and the Peer DN that you OK, but then it tells me that 'negotiation with the gateway [ip address] at site [site name] has failed. Access Denied - wrong username or password

Now as some remote workers are working and logging in no problem, i know the process must ne working, but why is it not letting me create new users or new certificates, and why has it mushed up the ones that stopped working?

Any help would be appreciated

Server Software: Checkpoint Express FW-1 / VPN-1 + AI (R55 - hfa 17)

Many thanks for your help on this

Simon

[jdance]

Hi Simon.

I'm no authentication guru, but I'll try my best to help with the basics. To help me (and anyone else who may look at this thread) understand your set up better would you mind providing us with this info?:

On the clients that are failing, have you tried using known good credentials to log on? If so, did this work?

What source are you using for your client authentication certificates?

How are your users set up? (ie are you using firewall accounts, or a third party to authenticate).

Do you have sufficient licenses to cover the new users you are adding?

Thanks
Jason