Check Point has a solution that is something like from a cheap software company. Nothing what I would expect of CP.
[Expert@gw:0]# pdp auth kerberos_encryption set RC4-HMAC-NT
Please select one of:
[Expert@gw:0]# pdp auth kerberos_encryption set aes128-cts-hmac-sha1-96
Kerberos encryption type is aes128-cts-hmac-sha1-96
*** You must push the policy for this change to take effect!
I have two domains and I'm not able to change the ciphers only for one domain. What a sh..