<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2655.61">
<TITLE>Checkpoint NG FP2</TITLE>
</HEAD>
<BODY>
<P ALIGN=LEFT><A NAME="_MailAutoSig"><FONT SIZE=2 FACE="Verdana">I</FONT></A><FONT SIZE=2 FACE="Verdana">'</FONT><FONT SIZE=2 FACE="Verdana">m trying to setup a VPN between two Nokia IP350</FONT><FONT SIZE=2 FACE="Verdana">'</FONT><FONT SIZE=2 FACE="Verdana">s running Checkpoint NG FP2.</FONT> <FONT SIZE=2 FACE="Verdana">I</FONT><FONT SIZE=2 FACE="Verdana">'</FONT><FONT SIZE=2 FACE="Verdana">ve used the internal_ca to generate</FONT> <FONT SIZE=2 FACE="Verdana">certificates on both systems.</FONT> <FONT SIZE=2 FACE="Verdana">When the two system try to establish the</FONT> <FONT SIZE=2 FACE="Verdana">IPsec</FONT> <FONT SIZE=2 FACE="Verdana">connection, I only see in the logs</FONT> <FONT SIZE=2 FACE="Verdana">'</FONT><FONT SIZE=2 FACE="Verdana">invalid certificate</FONT><FONT SIZE=2 FACE="Verdana">'</FONT><FONT SIZE=2 FACE="Verdana"> and certificate validation timeouts</FONT><FONT SIZE=2 FACE="Verdana">. Any ideas and is there a possibility to use pre-shared key</FONT><FONT SIZE=2 FACE="Verdana">'</FONT><FONT SIZE=2 FACE="Verdana">s</FONT><FONT SIZE=2 FACE="Verdana"> (between two fully managed FP2 checkpoints)</FONT><FONT SIZE=2 FACE="Verdana">?</FONT></P>
<P ALIGN=LEFT><FONT SIZE=2 FACE="Verdana">Many thanks,</FONT></P>
<P ALIGN=LEFT><FONT SIZE=2 FACE="Verdana">Guy</FONT></P>
<P ALIGN=LEFT></P>
</BODY>
</HTML>