locked
Check point Secure Client RRS feed

  • Question

  • I have been trying to install check point secure client vpn-1 R60 on my vista pc with live one care installed. Something is stopping the program from running. I also tried to install it on the xp laptop with live one care installed and had the same issue. I did a clean install of xp and then installed check point without live one care and it works. As soon as I install live one care it stops working. I have tried to add it to the allow programs list but have had no success. What do I need to do to make it work or do I have to abandon live one care?

    Thursday, October 8, 2009 3:51 PM

Answers

  • I suspect that this is one of the VPN clients will not work with OneCare's firewall due to the way both interact with the network stack.

    You may want to remove OneCare early, since it is at end of life and once your subscription is up, you will receive guidance about switching to Microsoft Security Essentials - which is free. MSE does not have a firewall, so you should be good to go. Note that MSE is based on the same engine and definitions as OneCare, but does not include the extras of OneCare. So, if you rely on OneCare backup, you'll need to seek an alternative and your old OneCare backups will be painful to restore if ever needed.
    MSE information and download here:
    http://www.microsoft.com/security_essentials/

    If needed, you can run the OneCare removal tool before installing MSE - 

    http://social.microsoft.com/forums/en-US/onecareinstallandactivate/thread/399071e2-49dc-4767-932d-d261e3965943/

    -steve


    Microsoft MVP Windows Live / Windows Live OneCare, Live Mesh, & MS Security Essentials Forums Moderator
    Thursday, October 8, 2009 4:41 PM
    Moderator
  • Ah this one's a classic. Hopefully I still remeber how to fix it. You need to enable the VPN. Go through "Change Settings" > Firewall > Advanced Settings > Ports and Protocols > find Virtual Private Network and put a check on it see if it works. 

    If not, click Add... now here's the tedious part:

    You need to add ports through the firewall to where your VPN goes through one by one. There are specified ones that it uses.
    (Don't worry we are not punching holes through the firewall since this will be occupied by your VPN Client when in use and OneCare will put them in stealth once its not in use.)

    1. Name: Encapsulation, Port: 2746-2746, Protocol: UDP, Connection: Both, Scope: Internet
    2. Name: IKE, Port: 500-500, Protocol: TCP/UDP, Connection: Both, Scope: Internet
    3. Name: Policy, Port: 18231-18233, Protocol: TCP/UDP, Connection: Both, Scope: Internet
    4. Name: MEP, Port: 259-259, Protocol: UDP, Connection: Both, Scope: Internet
    5. Name: Topology, Port: 264-264, Protocol: TCP, Connection: Both, Scope: Internet
    6. Name: Tunnel, Port: 18234-18234, Protocol: UDP, Connection: Both, Scope: Internet
    7. Name: ICA, Port: 18624-18624, Protocol: TCP, Connection: Both, Scope: Internet

    It seems to be a "mouthful" but it will let you connect without any problems in the future. IF at anytime you feel that this can be unbearable, let me quote Steve on this {hope he doesn't mind} please contact support:
     

    How to reach support (FAQ) - http://social.microsoft.com/Forums/en-US/onecareinstallandactivate/thread/30400b52-7f26-4ba0-bc18-17e305329d90

    Ciao~!


    Crimson Spectrum at http://aiscer.spaces.live.com
    Thursday, October 8, 2009 5:16 PM

All replies

  • I suspect that this is one of the VPN clients will not work with OneCare's firewall due to the way both interact with the network stack.

    You may want to remove OneCare early, since it is at end of life and once your subscription is up, you will receive guidance about switching to Microsoft Security Essentials - which is free. MSE does not have a firewall, so you should be good to go. Note that MSE is based on the same engine and definitions as OneCare, but does not include the extras of OneCare. So, if you rely on OneCare backup, you'll need to seek an alternative and your old OneCare backups will be painful to restore if ever needed.
    MSE information and download here:
    http://www.microsoft.com/security_essentials/

    If needed, you can run the OneCare removal tool before installing MSE - 

    http://social.microsoft.com/forums/en-US/onecareinstallandactivate/thread/399071e2-49dc-4767-932d-d261e3965943/

    -steve


    Microsoft MVP Windows Live / Windows Live OneCare, Live Mesh, & MS Security Essentials Forums Moderator
    Thursday, October 8, 2009 4:41 PM
    Moderator
  • Ah this one's a classic. Hopefully I still remeber how to fix it. You need to enable the VPN. Go through "Change Settings" > Firewall > Advanced Settings > Ports and Protocols > find Virtual Private Network and put a check on it see if it works. 

    If not, click Add... now here's the tedious part:

    You need to add ports through the firewall to where your VPN goes through one by one. There are specified ones that it uses.
    (Don't worry we are not punching holes through the firewall since this will be occupied by your VPN Client when in use and OneCare will put them in stealth once its not in use.)

    1. Name: Encapsulation, Port: 2746-2746, Protocol: UDP, Connection: Both, Scope: Internet
    2. Name: IKE, Port: 500-500, Protocol: TCP/UDP, Connection: Both, Scope: Internet
    3. Name: Policy, Port: 18231-18233, Protocol: TCP/UDP, Connection: Both, Scope: Internet
    4. Name: MEP, Port: 259-259, Protocol: UDP, Connection: Both, Scope: Internet
    5. Name: Topology, Port: 264-264, Protocol: TCP, Connection: Both, Scope: Internet
    6. Name: Tunnel, Port: 18234-18234, Protocol: UDP, Connection: Both, Scope: Internet
    7. Name: ICA, Port: 18624-18624, Protocol: TCP, Connection: Both, Scope: Internet

    It seems to be a "mouthful" but it will let you connect without any problems in the future. IF at anytime you feel that this can be unbearable, let me quote Steve on this {hope he doesn't mind} please contact support:
     

    How to reach support (FAQ) - http://social.microsoft.com/Forums/en-US/onecareinstallandactivate/thread/30400b52-7f26-4ba0-bc18-17e305329d90

    Ciao~!


    Crimson Spectrum at http://aiscer.spaces.live.com
    Thursday, October 8, 2009 5:16 PM
  • Thanks for your help. Removing One Care appears to be the way to go. After creating the ports as suggested I started having issues with VPN performance. Just not worth it.
    Friday, October 9, 2009 11:34 AM
  • Thanks for your help. Removing One Care appears to be the way to go. After creating the ports as suggested I started having issues with VPN performance. Just not worth it.

    That's unfortunate to hear. I guess you got it working, though the speed of connection might be slow. It happens when port connections are allowed through since the OneCare Firewall is still checking the packets or data being transferred. You may want to try MSE for security since OneCare is at the end of its days. It does not come with a firewall and simply a streamlined Antimalware solution for home users.
    Crimson Spectrum at http://aiscer.spaces.live.com
    Friday, October 9, 2009 12:34 PM