[abusharif]

Originally Posted by maurox

Hi all,
on the "old" ( R55) cluster there isn't the flag for hide the outgoing traffic with the cluster IP.
But i find the solution on the release notes ( as suggested by northlandboy ) that say:
"When employing SecurID for authentication, it is recommended to define each cluster
member separately on the ACE/Server with its own unique (internal) IP address. In
addition, to send packets to the ACE/Server with their unique IP addresses and not the
VIP address, edit the file table.def, located in $FWDIR/lib. Change the line starting
with no_hide_services_ports to, for example, no_hide_services_ports = {<5500,
17>}, where 5500 is the service port and 17 (UDP) is the protocol."
I'm going to test it.....
Maurox

Just note that if you make HFA upgrades in future they will probably overwrite your .def file (just in case it stops working one day ;))