CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Check Point VPN-1 Edge Appliances
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-10-06
Hitman Hitman is offline
Member
 
Join Date: 2006-05-11
Location: Montreal QC Canada
Posts: 36
Rep Power: 0
Hitman has an average reputation (10+)
Default VPN tunnel between VPN edge X and FW-1 in traditional mode

Hi,
I am not able to create a VPN tunnel between an VPN-1 EDGE X32 and a FW-1 SPLAT modules using Pre-Shared Secret Key in traditionnla mode.

Fact:

Both EDGE box and FW-1 module are manage by the same SmartCenter
Both rule set are in TRADITIONNAL MODE.
In the EDGE object in the SmartCenter there is no option for "Traditionnal mode Configuration", so i configure the VPN SETUP with the HTTPS:981 access
But in the Pre-Shared Secret section in the FW-1 Module, the EDGE object in not there, so i cannot configure the same Secret Key that i put in the EDGE with the HTTPS:981 access.

It seems that in "traditionnal mode" when the EDGE and a FW-1 module is manage by the same Manager there is no way to build a VPN connection between those two.

I can use an object "Externally managed Gateway" for the edge box and able to build a VPN in traditionnal mode between the edge and the FW-1 module, but my EDGE will not be manage by the manager, will not forward his log the the manager and will not be seen and monitor by smart view monitor..........

Thanks in advance for your support
Reply With Quote
  #2 (permalink)  
Old 2006-10-06
RayPesek RayPesek is offline
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 897
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: Vpn tunnel between VPN edge X and FW-1 in traditionnel mode

Correct. For an Edge to be managed by a SmartCenter, it must use a simplified policy and certificate authentication. During the setup, the Edge will pull the certificate from the SmartCenter automatically. There's no way around this while keeping it managed.

Ray
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 21:14.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0