Linux FreeS/WAN and Checkpoint Firewall1

Jsutin asks: "Does anyone have a working FreeS/WAN implementation talking to Checkpoint Firewall1? I've searched through a lot of Linux archives, FreeS/WAN archives, sent people email, and last but not least asked God to help me. And unfortunately all has fallen through! I've run across a few threads here and there that say it can be done but no documents explaining how to do it. I'm trying to push Linux as a VPN gateway for remote offices and would be greatly appreciative if anyone reading this has any suggestions?" "

Cool! :)

[Cybersonic]

Getting FreeS/WAN and Firewall-1 shouldnt be to hard... I wasnt aware of the FreeS/WAN project (until now :) , but now i cant want to set it up and test it with Linux! (the coolest advantage of working at a Checkpoint reseller, lots of Nokia based Checkpoint firewall-1 boxes laying around)
Ill install S/WAN on some redhat boxes here and test it with checkpoint 4.0 and 4.1... (and hopefully Checkpoint Linux someday soon ;)
- Cybie! aka Ralph Bonnell [ralph.cx]

How about FreeS/WAN and Cisco PICS

[sumner]

How about getting Free S/WAN working with the new PICS firewall/ipsec machines?

This is one thread I hope picks up soon

[1010011010]

This is a question I, personally, would love to have answered. We use Checkpoint FW/1 on Solaris where I work. It's a bit of a pain to get into the office network from outside (say, via my dialup account from Mindspring) when using Linux. The SecuRemote clients exist only for Windows. If Free S/WAN [xs4all.nl] will let me use my home dialup router/firewall (Linux) machine as a VPN client, yay.

I hunted through the mail-list archive and found the following:

• The Question. [ottawa.on.ca] More or less content-free.
• Some info, some questions. [ottawa.on.ca]
• Some answers [ottawa.on.ca] to the above questions. Like, FreeSwan no longer supports plain DES; you have to use 3DES. And, "Manual-key setup has to be done on *both* ends"
• This guy [ottawa.on.ca] is willing to pay for help.
• Assload of debugging data [ottawa.on.ca], from Interop setup.

Looking other places (Google, Yahoo, etc), I found this:

• Here [checkpoint.com] is a list of Checkpoint partners and things that work with a Checkpoint firewall. Not comprehensive.
• OPSEC [opsec.com] ("Open Platform for Security")site. Stuff that works with Firewall-1 and other OPSEC-compliant firewalls. I don't know if there are any besides FW-1.
• IPSec for FreeBSD [r4k.net]
• Some IPSec software from MIT [mit.edu]
• The people who make SSH [ipsec.com] also have IPSec/IKE products.

... anyone know of anything else?

Re:This is one thread I hope picks up soon

[Jethro]

> The SecuRemote clients exist only for Windows.

Be grateful; at least you have THAT much. I couldn't get the darn thing to work at all, and Checkpoint just stood there and went "Er... we dunno how to set it up either. Manuals? What manuals?".

We get the thing to FIND our firewall, but then what? Checkpoint don't know. Our eval ran out and they won't give us new ones. I wish I had an alternative before someone spent all the money on their software...

Some good info

[1010011010]

... that makes up for Checkpoint's incorrect and incomplete, and sometimes non-existant, documentation: Checkpoint Quick Reference [checkpoint.com], provided by some guy named "joe".