Re: IPSEC to Checkpoint SPOOFING_PACKET_DROPPED



Hi,

>I am trying to setup a IPSEC from ISA 2004 to a Checkpoint firewall
>and am
> getting "0xc0040014 FWX_E_FWE_SPOOFING_PACKET_DROPPED" errors when
> trying to
> RDP access the tunnel. I do not see any sessions in monitoring and
> when I
> open the Open the IPSec Monitor snap-in I do not see anything in the
> right
> window pain. When I do a route print I do not see any entries for the

when you get a spoofing error and you can't see any IPSEC connections
in Phase 1, i think you háve a routing / network problem. the ISA
Server computer may have no default gateway configured. When no default
gateway is defined, a static route is not added between ISA Server and
the remote site gateway. Because there is no route, traffic from the
remote site gateway is perceived as spoofing-and the traffic is denied.

regards Jens
www.nt-faq.de


.



Relevant Pages

  • Re: SBS2000 to router IPSEC
    ... Follow this link and scroll down to the IPSEC section. ... If i stop ISA services, ... dinamicaly monitor the ISA server activity, ... Another thing wich i am not sure is if i have to create the IPsec policie ...
    (microsoft.public.windows.server.sbs)
  • Re: Pure IPSEC Tunel and ISA2000
    ... clients to an external IPSEC VPN Endpoint. ... the IPSEC VPN Endpoint is the server runing ISA itself and the ... other end is another server in internet, so i think that i d'ont need NAT-T ...
    (microsoft.public.isa)
  • Re: SBS2000 to router IPSEC
    ... If i stop ISA services, the IPSEC link works fine. ... I have also tryed with an ISA ip filter that allow all trafic, ... In secpol.msc mmc in "IPsec local policies" i have created a new policie ...
    (microsoft.public.windows.server.sbs)
  • Re: Suche Spezialisten / Auftrag zu vergeben / Vollständig
    ... Der ISA macht VPN nur nach den RFC's und die sehen leider keinen PSK vor. ... Es geht um IPSec, wobei die "Site" der ISA ist und der ... "Router" ein mir unbekanntes Teil ist, ...
    (microsoft.public.de.german.isaserver)
  • Re: SBS2000 to router IPSEC
    ... I am now sure that the problem is ISA server. ... If i stop ISA services, the IPSEC link works fine. ... Another thing wich i am not sure is if i have to create the IPsec policie ...
    (microsoft.public.windows.server.sbs)

Quantcast