Error: Site config to xmit topology data w/o auth. - NG/SecureClient

[rstockton]

I am bringup up Client-to-site VPN on NG FP2 firewall. I can see the external interface of the firewall from the Internet. When testing by creating new site on SecureClient I receive the following error:

Error: Site x.x.x.x is configured to transmit topology data without authentication. This mode is no longer supported on the client.

I am using IKE. VPN-1 & Firewall-1 Password. "Exportable for SecureClient" is selected.

Any suggestions?

-r

 

[rstockton]

A call to checkpoint revealed the following:

When upgrading from 4.1 to NG (and subsequently FP2) a line in objects_5_0.C needs to be changed. Previously topology downloads to clients occurred prior to authentication or did not require authentication. SecureClient FP2 is wanting to authenticate to the firewall prior to receiving the topology (hence generating the above error).

The following needs to be modified on objects_5_0.C:
:allow_clear_gettopo <true>
should be changed to
:allow_clear_gettopo <false>

I'll let any interested parties know the results

-r