This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSEC VPN with Checkpoint NGR55

hi,
we're trying to do a VPN between an ASL 4.022 and a checkpoint NG R55 and we still can't make it work after putting all the necessary informations (the same lifetimes, authentication methods, encryption algorithms, ...)
we already have other VPN working perfectly - but not with a checkpoint.

are there some unsupported modes out there ? Or some hidden tutorials ? Or anyone with such an experience ?

thx for any suggestions ...

This thread was automatically locked due to age.

Parents

0 ClausP over 21 years ago

https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/t/28778
Cancel
Vote Up 0 Vote Down

Cancel
0 Micropole over 21 years ago in reply to ClausP

Yeah, we finally bought and received the licence in the meantime [;)]

I can't find the logs, it seems the attempts weren't logged :S

We'll try it again and i'll post the logs here
Cancel
Vote Up 0 Vote Down

Cancel
0 gafrol over 21 years ago in reply to Micropole

Last week I succesfully setup a site-site VPN with Astaro 5 and NG R55. I used PSK and it was working on the first try. I created the Astaro FW as an "interoperable Device" in the CP GUI. Under the Topolgy I selected "VPN Domain manually defined" and entered the private network range behind the Astaro FW.

Under "Traditional mode configuration..." All supported key exchange encryptions are enabled, also MD5 and SHA1 are enabled. And I assigned a PreSharedSecret which you need to enter in "Edit secrets..."

The VPN Params selected are:

IKE Phase 1 encryption 3DES, data integrity MD5, DH-Group 2, Renegotiate IKE every 1440 minutes.

IPsec Phase 2 encryption 3DES, data integrity MD5,Renegotiate IPsec every 3600 seconds.

After that the VPN between Astaro and CP worked just fine.
Hope this helps.

rgds
Roland
Cancel
Vote Up 0 Vote Down

Cancel
0 Micropole over 21 years ago in reply to gafrol

Thanks a lot, i'll catch our CP man and try it !
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Micropole over 21 years ago in reply to gafrol

Thanks a lot, i'll catch our CP man and try it !
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data