CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Authentication
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-11-23
motociclante motociclante is offline
Junior Member
 
Join Date: 2007-02-14
Posts: 21
Rep Power: 0
motociclante has an average reputation (10+)
Default Error with internal CA after migration from NG-R55 to NGX-R65

Hello everybody

We was migrating from and evironment composed of two cluster (two nodes per cluster), on splat r55 and one management fopr both cluster on windows 2000.

The new infrastructure is all on secureplatform NGX-R65.

I've followed the procedure indicated in the documentation and everything has worked fine except that for the internal CA and securemote connection.
When a remote client try to connect to Firewall, it receive an error about a missing certificate.

On the smartcenter server, via cpconfig rather than via SmartDashboard, isn't impossible to revocate, delete or renew the certificate.

Could be possible that this issue is related due to the fact tha the old management and the new one has a different host name?

Thank for your very fast answers.

Davide.
Reply With Quote
  #2 (permalink)  
Old 2007-11-23
RayPesek RayPesek is offline
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 862
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: Error with internal CA after migration from NG-R55 to NGX-R65

Quote:
Could be possible that this issue is related due to the fact that the old management and the new one has a different host name?
Very definitely yes.

Ray
Reply With Quote
  #3 (permalink)  
Old 2007-11-24
motociclante motociclante is offline
Junior Member
 
Join Date: 2007-02-14
Posts: 21
Rep Power: 0
motociclante has an average reputation (10+)
Default Re: Error with internal CA after migration from NG-R55 to NGX-R65

No, damnation.

I've changed every member's name and smartcenter name but nothing change.

The old cluster with managment turned off, works perfect. :-(
Reply With Quote
  #4 (permalink)  
Old 2007-11-24
RayPesek RayPesek is offline
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 862
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: Error with internal CA after migration from NG-R55 to NGX-R65

Try opening the firewall object, removing the check mark from VPN, closing the firewall object, opening it again and checking VPN again and closing it and pushing policy.

Ray
Reply With Quote
  #5 (permalink)  
Old 2007-11-26
motociclante motociclante is offline
Junior Member
 
Join Date: 2007-02-14
Posts: 21
Rep Power: 0
motociclante has an average reputation (10+)
Default Re: Error with internal CA after migration from NG-R55 to NGX-R65

Doesn't work.

But, does anybody knows how to perform an "a-part" CA export?
I'm almost 100% sure about the fact that something fails during the exportation of the CA?
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 06:23.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0