Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
B_P
Advisor
Jump to solution

Gaia traffic outside of VPN Domain is blocked due to "Clear text packet should be encrypted" ?

Traffic originating on "Check Point 1" (CP1) going to a network behind "Check Point 2" (CP2) is blocked by CP2 because of "Clear text packet should be encrypted." But the interface CP1 is sending the traffic from is not in the VPN Domain network and therefore should not be encrypted. Why does CP2 think CP1's traffic should be encrypted? R81.10 T95

CPVPNDomain.png

0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin
6 Replies
PhoneBoy
Admin
Admin
Daniel_Toader
Participant

How define in a crypt.def a subnet , not just an IP.

0 Kudos
PhoneBoy
Admin
Admin

Using the standard INSPECT syntax: net(<Network_IP_Address>, <Mask_Length>)

For example, for the subnet 192.0.2.0/24, you'd use: net(192.0.2.0,24)

B_P
Advisor

That applies only when 3rd party firewalls are involved, no? Surely not when only Check Point firewalls are involved.

0 Kudos
Bob_Zimmerman
Authority
Authority

It's mostly when only Check Point firewalls are involved. That functionality is how "permanent tunnels" work.

0 Kudos
B_P
Advisor

Regardless, Management should handle it behind the scenes. I don't understand Check Point's philosophy of "User interface says one thing and system does another."

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events