[vpn-help] Shrew with Checkpoint - without a certificate

Matthew Grooms mgrooms at shrew.net
Mon Feb 8 23:48:30 CST 2010


On 1/25/2010 5:44 AM, Andrew Miller wrote:
> Hello
>
> I am trying to use Shrew to connect to our checkpoint firewall, in order
> to use win7-x64 which secureremote doesn't support, however it is setup
> so that it uses only a username and password, not a certificate. They
> (IT support) tell me that they don't have the checkpoint module to
> create certificates.
>
> Is Shrew capable of connecting to this using only a username and
> password? If so, how do I do it? I have looked at the guides, and I
> cannot see a way to avoid using a certificate when setting up Shrew.
>
> Any help would be really appraciated.
>

Andrew,

I'm sorry but I don't have any advice for you. The Shrew Soft client 
supports Xauth with pre-shared keys but I don't think thats supported by 
checkpoint gateways. If its just vanilla preshared-key, the client 
supports that but I'm not sure what the ID's would look like. Maybe a 
user-fully-qualified DN with the PSK as your password?

-Matthew



More information about the vpn-help mailing list