While migrating a Cisco ASA to a locally managed Checkpoint 1450 appliance running R77.20.86, I came across a few issues which I can only explain as limitations on this appliance/cut down version of Gaia. these are listed below.
- Unable to create admin account with Bin/Bash shell - either via webui or clish - "set user username shell" command is not accepted
- Unable to selectively specify a local encryption domain on a per site-to-site VPN, you can select specific remote encryption domains but not local
- Unable to turn off NAT-T on a per site-to-site VPN site
- After deleting a newly formed sa and ipsec tunnel through "vpn tu" the vpn never came back up, performed an upgrade to .87 to no avail. for some reason the unit was attempting to use UDP/4500 (NAT-T) when it was connected directly on the internet
followed various debug guides such as
but the output from the firewall was not helpful, could this be an issue of running local management on the box?
I read a thread on Checkmates where G_W_Albrecht suggests that "1430 remote gateways locally weakens them" and that there is "limitations on the number of S2S tunnels"
Has anyone come across these or similar issues?