Chekcpoint appliance 1490 VPN site to site Problem

[dwinurm]

Hi all, 

anyone can help me, i create tunnel site to site between checkpoint and fortigate

the tunnel is up, but i can't ping from local address to remote address

from remote address to local address can ping

i'm already configure the policy rule and NAT rule.
can anyone help my problem

thank you

[HristoGrigorov]

You need to include remote network(s) in VPN domain. 

[dwinurm]

i'm already include the remote network(s)

[HristoGrigorov]

Is the packet encrypted or not ? You should be able to see that in the log. If it is encrypted then the problem is likely on the Fortigate's side.

[dwinurm]

the packet no encrypted on log, the packet through firewall blade, not on the vpn blade.

[HristoGrigorov]

You must have a dedicated access rule and specify that traffic that is matching it shall be encrypted. This is achieved differently according to how is appliance managed - centrally or locally. Check the appropriate guide for that.

[dwinurm]

my checkpoint 1490 appliance locally managed,

and i have configured access policies and NAT policies like this :

Access Policy rule :

NAT Policy Rule :

any issue with this configuration?

[HristoGrigorov]

In service column you shall specify services you want to pass through VPN (e.g. ICMP, HTTP, etc). Currently you specify that only IPSec protocol is to be encrypted in the community. And that is not even needed.

[dwinurm]

i'm change service with any service, but the result are the same

[HristoGrigorov]

As you are using NAT is it allowed for VPN connection as well? Both sides needs to do that.

[dwinurm]

what happens when i'm clear the NAT rule?