CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SecureClient/SecuRemote
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-03-01
Member
 
Join Date: 2006-02-27
Posts: 67
Rep Power: 3
philuxe has an average reputation (10+)
Default Secureclient authentication method

Hi all,


I can only authenticate my secureclient users with passwords set in the authentication tab of my users, I would prefer authenticate them againts IKE pre shared key defined in the encryption tab.

Trouble with the authentication is that passwords can not contain more than 8 characters.

I dont understand because in the VPN - Basic (Global properties) , Support authentication methods :

I have checked Pre-shared Secret (For SecureRemote/SecureClient users )


Thanks in advance.
Reply With Quote
  #2 (permalink)  
Old 2006-03-03
Member
 
Join Date: 2006-02-27
Posts: 67
Rep Power: 3
philuxe has an average reputation (10+)
Default Re: Secureclient authentication method

On Global properties :
- Preshared key Secret (for Secureclient securemote usersą is checked
- Public key is checked and cant be unchecked
- Hybrid mode is unchecked

In the user properties
- IKE is checked in the user encryption tab
- a preshared secret has been defined
- public key is checked
- the ike encryption tab is grayed.

Every time a user attempts to connect the cluster (VPN-1 Express cluster with IPSO clustering) I get the following message in the log viewer :

- reason: Client Encryption: Could not agree on common methods.
IKE: Main Mode Sent Notification to Peer: Client Encrypt Notification: [0008] Could not agree on common methods.
- Check that the user is properly defined.

I am wondering if this is a licencing issue or a config issue since I get working the secureclient in office mode using the internal auth methode.
Reply With Quote
  #3 (permalink)  
Old 2006-03-08
Member
 
Join Date: 2006-02-27
Posts: 67
Rep Power: 3
philuxe has an average reputation (10+)
Default Re: Secureclient authentication method

I have the solution user auth tab has to be configured to undefined, then define the psk in the encryption tab ...
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 14:55.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0