Secureclient : Could not agree on common methods

Ok but what is the purpose of the pre shared secret in the
encryption tab in users properties ???

Trouble if this is a normal behaviour is we can not
authenticate users with complex passwords : no more 8
characters in the authentication tab :/

Very strange ...


Philippe BLAVIER
International Network Administrator
+33 1.46.01.48.22
Philippe.Blaviervu-games.com



-----Message d'origine-----
De : Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
De la part de sin
Envoyé : vendredi 3 mars 2006 16:22
À : FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Objet : Re: [FW-1] Secureclient : Could not agree on common
methods

Philippe Blavier wrote:
>  
> 
> 
> I have already tried checking the hybrid mode. Actually
it only works if hybrid mode is checked.
> It means I can anthenticate the Secureclient with the
username defined 
> in the GUI and the password defined in the user
Authentication Tab. I 
> cant anthenticate the user with the couple username and
pre shared key 
> :/
> 

this is the normal and expected behavior:
either username/passwod combination or user certificate.

=================================================
To set vacation, Out-Of-Office, or away messages, send an
email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription
options, email fw-1-ownerts.checkpoint.com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

At 20:02 04.03.2006, you wrote:
>Ok but what is the purpose of the pre shared 
>secret in the encryption tab in users properties ???

to authentiate your VPN-client.

>Trouble if this is a normal behaviour is we can 
>not authenticate users with complex passwords : 
>no more 8 characters in the authentication tab :/

well, use certificates for authentication, that's 
much more secure. and better with smartcards, for example
aladdin etoken.

cheers
reinhard

>Very strange ...
>
>
>Philippe BLAVIER
>International Network Administrator
>+33 1.46.01.48.22
>Philippe.Blaviervu-games.com
>
>
>
>-----Message d'origine-----
>De : Mailing list for discussion of Firewall-1 
>[mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
De la part de sin
>Envoyé : vendredi 3 mars 2006 16:22
>À : FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
>Objet : Re: [FW-1] Secureclient : Could not agree on
common methods
>
>Philippe Blavier wrote:
> >
> >
> >
> > I have already tried checking the hybrid 
> mode. Actually it only works if hybrid mode is checked.
> > It means I can anthenticate the Secureclient with
the username defined
> > in the GUI and the password defined in the user
Authentication Tab. I
> > cant anthenticate the user with the couple
username and pre shared key
> > :/
> >
>
>this is the normal and expected behavior:
>either username/passwod combination or user certificate.
>
>=================================================
>To set vacation, Out-Of-Office, or away 
>messages, send an email to LISTSERVamadeus.us.checkpoint.com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http:
//www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your 
>subscription options, email 
>fw-1-ownerts.checkpoint.com
=================================================
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to LISTSERVamadeus.us.checkpoint.com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http:
//www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>fw-1-ownerts.checkpoint.com
>=================================================

-- 
Reinhard Stich  ASSIST  R.Stichinternet-security.at
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Philippe Blavier wrote:
> Ok but what is the purpose of the pre shared secret in
the encryption tab in users properties ???
> 
> Trouble if this is a normal behaviour is we can not
authenticate users with complex passwords : no more 8
characters in the authentication tab :/
> 

use certificates if you want something stronger than 8 chars
passwords.

> Very strange ...

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================