SSH V-01 through FW-1

[mushroom_new]

hi,
I have problems in uising ssh-v1 accross the firewall. the log say accept in the first step and says denied in the second one.
Any clue on this? I'm using FW1 NG AI

Thanks,
Jee

[kfulford]

Sounds potentially like the anti-spoofing configuration. What is the reason listed for the dropped message? Information field will give a better idea where to start looking.

[yowieWithin]

It could also be a routing issue.
Check the routes on the firewall, and ensure it is routing it out the interface you think it should be.
You don't say what OS you're using, but 'route get' is your friend on Solaris.

[chillyjim]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Do you have SSH v1 blocked in your SmartDefense policy?

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.2 (Build 2424)

iQA/AwUBQxOcOpAxy6WP/pauEQLTRwCg8x60InLd1XojOL/136ld3XYxgvcAnRHJ
vB2iFUo16obmJa3PHksje8Q+
=IjXX
-----END PGP SIGNATURE-----