[Markhawks]

Hello Checkpoint Gurus,

We just completed an upgrade from R55 to R60, where we built out a new gateway, and migrated the existing policy over to the new gateway. When we brought up the gateway Monday, we noticed that all the existing PPTP connections stopped working.

We then added a rule explicitly allowing PPTP services (NGX has a predefined Service group with pptp-tcp and GRE in it). The rule fires, and the log shows these connections as allowed, but they do not ever connect successfully.

On further analysis, we see that GRE configuration requests (identified in Sniffer as LCP Configure Requests) are not getting through. The gateway drops these requests both ways.

We have a ticket open with Checkpoint, but I wanted to see if anyoine else had experienced this issue. Any ideas?
thanks in advance,
Mark