IPsec problem: Clear text should be encrypted

[Dayaana]

Hi all, I'm new to checkpoint and I'm doing lab work on IPsec right now. I'm trying to set up a vpn connection between GW1 from one LAN to GW2 from another LAN. SMS is located on the same subnet as GW1.

When I try to install a policy, a timeout error occurs. In the logs I can see that when GW2 TCP connects to SMS there is an error: Clear text should be encrypted. Ping between the devices of the two networks passes.

Also, only these TCP events with the error have a VPN blade. All other traffic between the two networks passes without VPN.

Can anyone tell me how to fix this? Any help would be appreciated.

[_Val_]

If your management can only reach GW2 via a VPN tunnel, it is a bad design. Exclude your MGMT IP address from the VPN domain

[Dayaana]

Thank you so much for your reply! Can you please tell me how I can do this?