CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 52 attendees signed up from 14 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Web Security > SSL Network Extender
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-06-05
wrc_blue wrc_blue is offline
Junior Member
 
Join Date: 2006-06-05
Posts: 7
Rep Power: 0
wrc_blue has an average reputation (10+)
Default Cannot connect via connectra

Hi all,

This is my first foray into connectra and I am having some issues with SSL network extender. I keep getting the message "cannot establish connection to SSL Network Extender gateway. Try to reconnect" when trying to connect over a regular internet link. Through the our internal network it I can connect with no problems. Any ideas would be helpful. Thanks all.
Reply With Quote
  #2 (permalink)  
Old 2006-06-05
wrc_blue wrc_blue is offline
Junior Member
 
Join Date: 2006-06-05
Posts: 7
Rep Power: 0
wrc_blue has an average reputation (10+)
Default Re: Cannot connect via connectra

Found the answer to my problem. Thanks.
Reply With Quote
  #3 (permalink)  
Old 2006-10-07
canghel canghel is offline
Junior Member
 
Join Date: 2006-10-07
Posts: 24
Rep Power: 0
canghel has an average reputation (10+)
Default Re: Cannot connect via connectra

It would be nice if you post the solution (or a link to a document).

Thanks,
Adrian
Reply With Quote
  #4 (permalink)  
Old 2007-12-30
league league is offline
Junior Member
 
Join Date: 2007-06-02
Posts: 2
Rep Power: 0
league has an average reputation (10+)
Default Re: Cannot connect via connectra

I have same question , would you like how to debug?

thank you in advance
Reply With Quote
  #5 (permalink)  
Old 2008-01-18
hotice_ hotice_ is offline
Senior Member
 
Join Date: 2007-06-05
Location: Montreal,Canada
Posts: 143
Rep Power: 2
hotice_ has an average reputation (10+)
Default Re: Cannot connect via connectra

I am having this exact problem

Please post a solution...


I did explicitely put the public IP of the connectra portal as it was nated behind the firewall
Reply With Quote
  #6 (permalink)  
Old 2008-01-19
RayPesek RayPesek is offline
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 873
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: Cannot connect via connectra

Hi hotice_,

From your answer I think you know that you need to explicitly set the public IP address of Connectra in the portal and that is what you did, correct? Good catch, many people miss that part of the setup.

What version of Connectra? Most require the use of TCP 444 for SNX while the portal itself uses TCP 443. If 444 is not allowed in the firewall rule or in intervening firewalls SNX cannot work. The "intervening firewall" part caused us a lot of issues.

I changed SNX to use 443 and added a second public IP address to the Connectra interface and set SNX to use that IP address. It does burn a second public IP address but it lets both the portal and SNX use the standard TCP 443 port.

Ray
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 04:08.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0