Any thoughts on my current problem would be gratefully received.
We have recently migrated from NG AI R55 HFA04 on Solaris 8 (Module and
SmartCentre on separate boxes), to NGX R62 on a IP260. The SmartCentre
being kept on the Solaris box, but also updated to NGX R62.
Basically an upgrade with no changes to the basic topology or rulebase,
other than those necessary for change of module hardware etc.
Everything works fine, except, at random intervals (at times a couple of
times a day, latest once in two weeks), the SecureClient connections
fail. Remote Users can still authenticate, and then get "connected",
but no traffic flows anywhere to the internal network. During this
time, incoming SSL connections work, and all outgoing connections work
fine. It is only the SecureClient tunnels that seem to fail.
Various releases of SecureClient are being used, mainly in Office Mode.
Stopping and restarting the firewall services does not resolve the
problem. The IP260 needs to be rebooted. A second hardware box has
been tried with the same problem.
Checkpoint have been setting various debug options and collecting logs,
but I was wondering if anybody has come across the same or similar
problem.
Alan Baker
Sepura Ltd
01223 877335
_______________________________________________________________________
The information in this email is confidential. It is intended
solely for the addressee. Access to this email by anyone else
is unauthorised. If you are not the intended recipient, any
disclosure, copying, or distribution is prohibited and may be
unlawful. If you have received this email in error please delete
it immediately and contact commercial AT sepura DOT com.
Sepura Limited. Registered Office: Radio House, St Andrew?s Road, Cambridge,
CB4 1GR, England. Registered in England and Wales. Registration Number 4353801
_______________________________________________________________________
This e-mail has been scanned for all viruses by Star Internet.
The service is powered by MessageLabs.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
