Can't Find Client Encrypt Option

[parlay]

Please help urgently, I am trying to get my vpn going and when I try to create the rule for all secureclients to access Encryption domain, there is no option under Action for "Client Encrypt". I have been trying to find this for 3hrs now. Please help!

Thx
Ian

[abusharif]

that option is only when your policy is in traditional mode. In simplified mode encryption properties are set on the remoteaccess community. Maybe thats the issue you are having?

[parlay]

How do I get into Traditional mode?

[abusharif]

Originally Posted by parlay

How do I get into Traditional mode?

which version of checkpoint are you running? You can afaik only convert from traditional -> simplified, not the other way around. So if you want, for some reason(?) traditional you will have to create new policy from scratch.

Why would you like to run traditional mode anyway?

[parlay]

I am running NG FP3. Basically last nite I had to re-build my firewall from scratch! so I copied all the rules exactly the same but as I said below when I tried the vpn rule, the Client Encrypt is not available under Action. We use SecureRemote to connect to vpn.

[abusharif]

Originally Posted by parlay

I am running NG FP3. Basically last nite I had to re-build my firewall from scratch! so I copied all the rules exactly the same but as I said below when I tried the vpn rule, the Client Encrypt is not available under Action. We use SecureRemote to connect to vpn.

Ah i see.

Well basically from the menu in smart dashboard (FILE->NEW) create new security policy and choose Traditional. Recreate your rules and you'll be fine.

good luck


edit: also make sure that you have "VPN" checked on the gateway object in the list of available features

[parlay]

Thanks a lot for your help!

[parlay]

Hey Abusharif, have you ever seen this error?

FW1: ndis_allocate_packet: Cannot allocate new packets

I keep getting a rash of them at one time then my FW stops responding and I have to reboot to get it back.

please let me know. thx

[abusharif]

Originally Posted by parlay

Hey Abusharif, have you ever seen this error?

FW1: ndis_allocate_packet: Cannot allocate new packets

I keep getting a rash of them at one time then my FW stops responding and I have to reboot to get it back.

please let me know. thx

Are you running your firewall on windows?
See KB article on checkpoint sk25392

[parlay]

When I do a search for that article, it comes up with nothing. could you post it for me? and yes I am running Windows

[parlay]

Anyone have any ideas?