Hi Guys;
We are trying and integrating Symantec VIP 9.5 with Checkpoint R77.10 VPN.
In our initial configuration we have configured the Symantec Enterprise Wateway server's validation service to listen on 1812, configured the secret key and also setup the user store. The Symantec Enterprise Gateway server is setup on Windows 2008 R2 server.
Using the integration guide we have configured the Checkpoint box. Everything been set; we tested out the configuration and the results were not as expected.
Few users are able to login into the Checkpoint VPN and few are not.
Troubleshooting:
1. We checked the validation logs were it states the "Incorrect LDAP password" for few users.
2. We have personally checked that the users are entering the correct password followed by their VIP codes.
3. Also we used the "vsradiusclient tool" to verify the faulty user against the validation services and the results showed "Access-Accept"
4. We also verified the same with Wireshark. When the request came from Checkpoint VPN it showed "Access-Reject" and when the request came in from "vsradiusclient tool" the result was "Access-Accept"
5. Also the user groups in the Active Dicrectory is the same for the users which are able to authenticate via Checkpoint VPN and the ones which are not.
Do let us know your ideas on the same.
Thank you