Cisco VPN THOUGH a Checkpoint firewall

[Guest_imported]

Hello,

To start I don't know Checkpoint at all! I handle the cisco side of things.

I have a VPN user going though corprate network thats using a Checkpoint to our Cisco router.
Like this:

User(DHCP internal network) -> Cisco router(no security iplmented)->Checkpoint firewall-> INTERNET ->Cisco router (Firewall and VPN server)->internal network.

Now the VPN client only needs port 500 UDP and IP 50 to work. But the other company I'm working with that has the Checkpoint firewall doesn't seem to know much about it.

My main question is how do you allow IP protocol 50?

If anyone can help out that would be great!

 

[MartinTre]

Hi

you should have the service you need.
Called ESP.

If not .. create a new service (other)
Match: "ip_p = 0x32"

Martin