Which gateway process is responsible for the authentication?

Remote clients are using IPSec VPN to authenticate via LDAP server to connect to the
organization. Which gateway process is responsible for the authentication?

Remote clients are using IPSec VPN to authenticate via LDAP server to connect to the
organization. Which gateway process is responsible for the authentication?

A.
fwm

B.
fwd

C.
vpnd

D.
cvpnd

Show Hint

Leave a Reply 7

Your email address will not be published. Required fields are marked *

Vlad

Vlad

C is correct.
vpnd is responsible for IPSecVPN
cvpnd is responsible for Mobile Access.

Reply

florentjustin

florentjustin

Answer : vpnd

sk97638
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638

vpnd: description :

* IKE (UDP/TCP)
* NAT-T
* Tunnel Test
* Reliable Datagram Protocol (RDP)
* Topology Update for SecureClient
* SSL Network Extender (SNX)
* SSL Network Extender (SNX) Portal
* Remote Access Client configuration
* Visitor Mode
* L2TP

sk98256
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98256

Symptoms:

* Remote Access VPN Authentication fails with the “Access denied – wrong user name or password” error after upgrade of Security Management Server / Multi-Domain Security Management Server.

* SmartView Tracker logs show: “reason: Client Encryption: User unknown.”

* Debug of VPND daemon (per sk89940) shows:

* * create_interesting_group: Found NUMBER relevant groups. Sorting and removing duplicates, APNs and All Users

* * create_interesting_group: au_prepare_groups failed to create interesting_groups

Cause:

VPND daemon tries to validate all the objects in the “Participant user groups” of the Remote Access Community.

If the object “VPN-1 Embedded devices defined as Remote Access” is included, VPND fails and no Remote Access user can authenticate.

Reply

Wendy Legal

Wendy Legal

Wrote 156-315.77 last Friday, and passed with 95%!

There were 89 questions of my 156-315.77 exam, many Fill in the Blank questions.

Around 10-15 new questions (IPS, Threat Prevention FW Monitor, VPN Tunnel Sharing, GAiA…etc.).

Be careful of questions on Command and Syntax, GAiA Command.

I used the PassLeader 156-315.77 dumps (http://www.passleader.com/156-315-77.html) (752q VCE and PDF dumps) for preparing for exam, all NEW questions were from it, the most valid 156-315.77 dumps!

Reply