CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SecureClient/SecuRemote
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-10-31
Junior Member
 
Join Date: 2007-09-13
Posts: 7
Rep Power: 0
stachr has an average reputation (10+)
Default SecuRemote blocks HTTPS under certain conditions?

I have SecuRemote NGX R60 HFA-02 installed on a XP SP2 laptop. When SecuRemote is bound to the LAN adapter and connected to our private network (10.0.0.0/16), I can access HTTP sites, but not sites that use HTTPS. If I unbind SecuRemote from the LAN adapter, HTTPS websites work fine. The SecuRemote services are set to start automatically.

If I disconnect from the private network and connect to a wired network on a different subnet, i.e. 192.168.x, HTTPS sites work fine.

Am confused!! Any ideas for a Check Point VPN luddite like me? :-)

<edit>
I've also noticed around the same time I submit the HTTPS request, i.e. from within MSIE6, an "FW1" error is logged in the System event log. Full details below:

Event Type: Error
Event Source: FW1
Event Category: None
Event ID: 1
Date: 31/10/2007
Time: 16:58:23
User: N/A
Computer: <computername>
Description:
FW1: F Sending reset dire

Unfortunately this event means absolutely nothing to me!!
</edit>

Last edited by stachr; 2007-10-31 at 11:18.
Reply With Quote
  #2 (permalink)  
Old 2007-10-31
Senior Member
 
Join Date: 2007-06-04
Posts: 1,070
Rep Power: 3
mcnallym has an average reputation (10+)
Default Re: SecuRemote blocks HTTPS under certain conditions?

Is the SecureClient configured to support Visitor Mode at all as that uses HTTPS to encapsulate the normal VPN traffic.
Reply With Quote
  #3 (permalink)  
Old 2007-11-06
Junior Member
 
Join Date: 2006-02-28
Posts: 17
Rep Power: 0
stefan73er has an average reputation (10+)
Default Re: SecuRemote blocks HTTPS under certain conditions?

hi,

i had similar problem with the access to https sites if the SR is bound to the LAN interface.

this reg entry solve it for me

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\FW1\Parameters\Globals]
"asm_http_allow_connect"=dword:0000000e


I hope it will help you too.

cheers,

Stefan
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 16:29.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0