Opening PIX 515e for Checkpoint SecuRemote VPN

[SGingolaski]

Greetings -

I need to allow a user - using Checkpoint SecuRemote Client software - who is behind my PIX 515e firewall to connect to a vendor operated Checkpoint firewall.

Does anyone know the minimum ports necessary that I need to open on my PIX in order to allow this to happen?

I contacted Checkpoint but they wanted $475 in order to answer a question about their software.

Thanks,

sg

[minoc]

Depending on what kind of VPN the remote client is using (IKE,/FWZ) you might need to open the following ports on the PIX:

A. For IKE:

1. IP protocol 50.

2. UDP 500.

3. UDP 2746 for UDP Encapsulation.

You also need to do IPOOL NAT on the Securemote client for this to work.

Regards,

Carlos Roque