CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SecureClient/SecuRemote
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-03-22
Junior Member
 
Join Date: 2006-03-22
Posts: 4
Rep Power: 0
tec92407 has an average reputation (10+)
Default SecuRemote - gateway fingerprint update

I've installed a new Nokia/NGX firewall.

When I connected with securemote using my own computer, I was prompted to accept the new fingerprint. I accepted and logged on successfully.

I have an existing securemote user that cannot connect and the following message is displayed on their desktop:

"could not validate certificate used by (fw1 hostname) at site (fwi ext ip address). Cannot construct a valid certificate chain from peer certificates."

Do I need to re-install securemote on the users computer?

Thanks in advance.
Reply With Quote
  #2 (permalink)  
Old 2006-03-23
Junior Member
 
Join Date: 2005-11-28
Posts: 4
Rep Power: 0
robertvg has an average reputation (10+)
Default Re: SecuRemote - gateway fingerprint update

On the client computer go to the settings of the site and choose 'Update Site...' Alternatively delete the site and re-create it.
Reply With Quote
  #3 (permalink)  
Old 2006-05-16
Junior Member
 
Join Date: 2006-05-16
Posts: 13
Rep Power: 0
srahman has an average reputation (10+)
Default Re: SecuRemote - gateway fingerprint update

Your answer was spot on.... worked a treat for me. Thank you.
Reply With Quote
  #4 (permalink)  
Old 2007-03-01
Junior Member
 
Join Date: 2007-01-17
Posts: 3
Rep Power: 0
jdance has an average reputation (10+)
Default Re: SecuRemote - gateway fingerprint update

Additional info for future searches:

If the userc.c file is modified (or corrupted) and the firewall hostname is replaced (ie name replaced with the IP address), then the certificate given to the secureclient by the firewall is no longer correct and the client throws the message listed above.

Last edited by jdance; 2007-03-01 at 11:58.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 16:10.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0