ACE server and Firewall-1 authentication stopped after IP change

[OurIT]

I installed ACE server and Firewall-1 2 years ago all was working fine until I had to change IP address (ISP).

I had to apply patches SR2 to SR6 to Firewall-1 on the NT4 SR6a server and reissue licences to make the change. Everything was successful, except our travelling users who VPN in over the internet and authenticate via SecureID cards (FOBs) could no longer.

The Firewall log shows a dropped packet with the following description: Encryption failure “no encryption” or “no rdp licence”

The clients show a pop up No answer from a Firewall at site x.x.x.x

I have changed host files, synced time, recreated sdconf.rec and distributed – no change.

The clients have been patched as well.

Is there a check list I can follow to setup this type of authentication?
Tech Team
support@ourit.com.au

http://www.ourit.com.au

 

[ballbof]

One thing to check is that your ISP is not blocking VPN traffic. Some do by default but will probably pass it if you ask.