Migrating FWZ Users to IPSec

[roadrunner]

Migrating FWZ Users to IPSec

Question
Now we have Check Point 4.0 FW-1/VPN-1 and SecurRemote 4.1 using FWZ for Remote Access. We will migration the Firewall to NG FP3 soon.

Now the VPN client is communicating with Management Server for FWZ key negotiation.

My question is


Once I migrate both Management Server and Firewall/VPN module to NG, can SecuRemote 4.1 communicate with NG?
If yes, can VPN client 'auto' update the site information? (ie, From FWZ to IKE 3DES)? Or I need to re-install All VPN clients one by one?

Answer
A 4.1 SecuRemote client can communicate with an NG firewall. I don't recall if automatic topology/site updates were available in SecuRemote 4.1. Each client will need to have the site "deleted" and "re-added." An end user with proper instructions can do this. It is recommended, of course, that the clients upgrade to a more recent SecuRemote client since 4.1 isn't supported any longer.

-- PhoneBoy - 01 Jan 2004


FAQForm
FAQs.Class: InstallAndUpgradeFAQs, SecureClientFAQs
FAQs.OS:
FAQs.Version: