[Raedm]

Hi,

I am running a VRRP test, sending an continues ICMP packet (PING command) between an internal and external clients to the ISP. The process would fail over to the secondary FW when the primary goes down. However, opening an FTP sessions between both clients is not failing over when the master goes down.

Notes:
1- I am testing IPSO 4.0 build 40 with NGX R60 HFA_03.
2- the secondary becomes the master after the master gets disconnected.
3- Running an FTP sessions with out the fail over would work fine.
4- Starting another FTP sessions after the master become unviable and the secondary becomes a master would work fine.
5- Smart view tracker showing the following error message when the fail over occurs and the FTP sessions get disconnected " "TCP packet is out of state, first packet isn't SYN tcp_flags:FIN_ACK"


Any suggestions.