How do I prevent encrypting to the remote gateway

[roadrunner]

How do I prevent encrypting to the remote gateway
I've set up a site to site VPN between FW-1 4.1 and FW-1 NG SP3. No problem getting from internal network to internal network.

When trying to ping the FW-1 4.1 gateway from the network on the FW-1 NG side, the ICMP packets to the gateway are being encrypted. How does one prevent this?

Answer


--------------------------------------------------------------------------------
NG automatically adds the gateway to its own encryption domain. Problems can develop if the remote gateway is taken out of the other site's encryption domain. So depending upon your situation do the following:

ClassicMode Add a rule above the encryption rule specifying traffic that should be sent clear text.

SimplifiedMode Use the option "Services in the clear..."

--------------------------------------------------------------------------------
-- RobertGraham - 07 Jan 2004

FAQForm
FAQs.Class: EncryptionFAQs
FAQs.OS:
FAQs.Version: