Checkpoint VPN-1 to Cisco PIX

[vallan]

We have been trying to connect from our checkpoint to a remote Cisco PIX. We get the erroe messsage:

Error site 199.222.14.91 says that it is not a CA Check whether you have got the right ip address for 199.222.14.91 and check with the FW-1 system manager there whether 199.222.14.91 is indeed a FW-1 control station.

199.222.14.91 is the right ip address as when we put in a different ip address it rejects it and does not make any contact at all.

We have actually checked that we do not want public keys. Has anyone come across this and how was it sorted out.

Thanks for your help.

 

[SgtB]

We just recently set up a VPN from PIX to VPN-1 w/o much of a problem. We used shared secret, and it went fine.
What version of FW-1? How do you have the PIX device set up? Is VPN-1 Pro or Net checked in the firewall's properties?
More info on your environment please. ________________________________________
Check out

http://www.security-forums.com

 

[along5664]

I am having problems with ngfp3 and pix. We are using shared secret 3des and md5. We keep getting no valid sa. Anybody got any help?