I think what you are seeing is 'tcp packet out of state' (and not sync,
right?)Please also clarify which timeout are you talking about that you have
increased from 30 secs to 300 secs? The issue can happen for so many
different reasons but I think some clarification on the above should help
you moving forward.
Rajeev
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of
Shrivastava, Anurag (GE Healthcare, non-ge)
Sent: Monday, February 28, 2005 8:08 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] connection timeout settings
FW Gurus!
We are facing "TCP packet out of sync" issue ( as seen from the fw logs in
the smart dashboard).
The current solution that I could think of is "increasing the timeout in
'global properties' from
current one of 30sec to 300sec. But I fear that this would leave many
sessions open for long time.
That might effect the network.
Also, since this is global properties related, this will effect all FWs of
our global infrastructure
Can you please suggest some other way (other than global properties) by
which i can increase the timeout?
Waiting for your valuable comments and suggestions.
Regards
Anurag
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
