[FW-1] encryption fail reason: temporary unavailable resources

[trentda <[EMAIL PROTECTED]>]

I am having a problem after upgrading from 4.1 SP6 to NG FP3.

The problem is that internal IP addresses can no longer access a VPN
SecuRemote/SecureClient users.  The error gets logged as
"encryption fail reason: temporary unavailable resources"

I am using IKE pre-shared secrets and IP NAT Pool and SecuRemote and Secure
Client 4.1 (SP5) and NG FP3.  The firewall and management station are both
NG FP3...

Most applications work except the ones that require a back connection.  I
can replicate the problem by initiating a ping from Internal IP to SR/SC IP
NAT Pool address...

So basically...
If an internal user/application tries to ping/access the IP NAT Pool address
it will fail with error "encryption fail reason: temporary unavailable
resources"
But if internal ip tries to ping/access the address bound to
SecuRemote/SecureClient NIC then it will work.

Thanks
T.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================