Checkpoint VPN client does not use ESP but some UDP port for enrypted data

Jul 28, 2006 3 Replies

Rate this thread:

andipfaff 19 years ago

Hi,

today we tried to solve a problem with a Checkpoint VPN client behind a Cisco ADSL router with access list on the WAN interface. I had to open ALL UDP ports, because the VPN client sends encrypted data not with ESP like expecte but with UDP packets with random port numbers. There is a way to configure NAT traversal etc. but in fact this affects just the ISAKMP encryption. Doing the same on the Cisco VPN client does what I want: ISAKMP alway with UDP 500/500, data via ESP, UDP 4500 or TCP

10000 (depending on the settings).

Is there a way to send encrypted data with ESP on the checkpoint client? I am not willing to let open all the incoming UDP ports!

thanks in advance Andi

Vote

optikl 19 years ago

This probably isn't the answer you want, but have you thought about converting to just Cisco VPN clients?

Vote

Dataway 19 years ago

Hi Andi,

I work for Dataway, Inc. We are a network security firm, and partnered with both Check Point and Cisco. We have extensive experience with VPN's on both and between both. If you would like assistance with this, I can help you. Please feel free to give me a call at

415.659.1720 to discuss.

Best Regards,

Jason

andipfaff wrote:

Vote

Volker Birk 19 years ago

Jason,

it's not OK to post advertizing here.

Please send an email to the person directly, whom you want to make an offer.

Thank you, VB.

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required