Viewing Ike Traces For Vpn Connections - Check Point UTM-1 Edge User Manual

Viewing IKE Traces for VPN Connections

Viewing IKE Traces for VPN Connections

If you are experiencing VPN connection problems, you can save a trace of IKE (Internet
Key Exchange) negotiations to a file, and then use the free IKE View tool to view the file.
The IKE View tool is available for the Windows platform.
Note: Before viewing IKE traces, it is recommended to do the following:
•
The UTM-1 appliance stores traces for all recent IKE negotiations. If
you want to view only new IKE trace data, clear all IKE trace data
currently stored on the UTM-1 appliance.
•
Close all existing VPN tunnels except for the problematic tunnel, so as
to make it easier to locate the problematic tunnel's IKE negotiation
trace in the exported file.
To clear all currently-stored IKE traces
Click Reports in the main menu, and click the Tunnels tab.
1.
The VPN Tunnels page appears with a table of open tunnels to VPN sites.
Click Clear IKE Trace.
2.
All IKE trace data currently stored on the UTM-1 appliance is cleared.
To view the IKE trace for a connection
1. Establish a VPN tunnel to the VPN site with which you are experiencing
connection problems.
For information on when and how VPN tunnels are established, see Viewing VPN
Tunnels on page 537.
Click Reports in the main menu, and click the Tunnels tab.
2.
The VPN Tunnels page appears with a table of open tunnels to VPN sites.
Click Save IKE Trace.
3.
A standard File Download dialog box appears.
Click Save.
4.
540 Check Point UTM-1 Edge User Guide