VPN with 3rd party - Scenario 3 - Implicit inclusion of external addresses

[Juan_]

Have applied the mentioned solution on an R80.40 manager with R80.40 gws (take 91)

Unfortunately i still see the external addresses trying to be negotiated by the checkpoint

My $FWDIR/lib/crypt.def looks like in the attached screenshot, dst ip addresses are remote peers.

Policy pushes fine but the TSi, TSr still wrong. Yes, IKEv2 btw.

Any ideas?


Cheers

[PhoneBoy]

Recommend a TAC case here.