AT&T global network client Problems

[Producer]

This is a very interesting problem.

We have a client using the AT&T global network client.

They can not connect and I get this as an error on the FW. I replaced the IP's with descriptions.

Number: 528053
Date: 1Nov2007
Time: 10:08:36
Product: VPN-1 Power/UTM
Interface: eth1c0
Origin: cchcfw2
Type: Log
Action: Drop
Protocol: 50
Source: INTERNAL CLIENT IP
Destination: cchcfwcluster (OUR EXTERNAL FIREWALL IP)
SmartDefense Profile: Default_Protection
Information: encryption fail reason: Packet is dropped because an IPsec SA associated with the SPI on the received IPsec packet could not be found

It looks like the client is trying to establish a VPN with our External IP and not the AT&T network.

Smart defense error? Nat problem? Encryption domain?

Thanks in Advance.

[mcnallym]

What address have they put in the ATT client. I suspect that is probably why trying to connect to your gateway.

[Producer]

Naw, answer was a one to one nat. Does not work with hide nat. ty though.