I have just set up a VPN between a Cisco Router (1710) and a Checkoint R55 (Nokia 440). Setting are to allow all traffic. The tunnel is accepting http and https traffic. It is however dropping ICMP for some reason. The logs only show a drop due to NAT (VPN error code 2). Other services are also playing up such as SMTP and POP3 (therecould be others I have not checked. My query is how does HTTP/HTTPS get through on Rule 0 (VPN) an not the rest if there are no rule restricting the services. Where do I look to correct this.
make sure in the global properties, you set accept ICMP to "before last" instead of "first". That way, icmp traffics will be processed by the vpn rules. Furthermore, what you do use? Traditional mode or simplified mode? You also want to check "disable NAT inside vpn communities" in the vpn community of interest.
