Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Has anyone successfully got this to work? The VPN client uses UDP encapsulation and adds an 8 byte header to the encrypted packet, which ISA then strips out. the remote gateway then rejects the connection.

I have tried the NAT-T solutions but they don't seem to work. I have set the following in the firewall policy:

UDP 500 send-receive IP-level 51 send-receive IP-level 50 send-receive UDP 4500 send-receive UDP 2746 send-receive TCP 264 outbound

I have also set some other ports but I think they are specific to this implementation. Does anyone know the exact settings that should be enabled on the client?

any advice would be appreciated.



share|improve this question

You may want to look at visitor mode since that works on port 443 and should get through the ISA without any problems. But I am not sure if it is available in SecuRemote or if it is only in SecureClient.

CheckPoint sk13187 list all the ports need if don't already have a list.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.