VPN tunnel between PfSense and Checkpoint NG

Feb 02, 2006 2 Replies
D

Hi everyone,



I don't know if this is the best ng to place my question.



I'm having trouble creating a VPN tunnel between my Checkpoint NG R56 cluster and a pfsense box.



I successfully create a tunnel in the reverse direction, e.g. a client behind pfsense can connect via IPSEC tunnel to a client protected by checkpoint. I still have problem the other way around.



Both firewall has been configured with 3DES and MDS for both phase 1 and 2 and PFS (perfect forward secrecy) and the same shared secret (obviously). I've created successfully the same scenario with a SmoothWall box with Openswan patch and vpnpack.



Does anyone has any idea ?



Thanks Riccardo


Vote
Twitter Facebook LinkedIn
A

Hi Riccardo, first of all something is strange: Check Point NG last version is R55W. R56 is just for SecureClient.

Anyway to successful troubleshoot this environment I should see the Check Point SmartView Tracker logs and pfSense IPSec logs.

Can you provide a couple of screenshots?

Alessandro Perilli, CISSP, MVP

formatting link

Vote
Twitter Facebook LinkedIn
A

Riccardo, I have the strong suspect the Check Point object for pfSense network has the wrong subnet mask. Or something like that. The declared Check Point error is not necessary helpful or related to the real problem.

I could say it for sure just looking at the Check Point screenshoot for Main Mode packet, without any privacy masking. If you prefer send me a direct mail with the screenshot.

Regards

Alessandro Perilli, CISSP, MVP

formatting link

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required