Client Authentication problem

[Wutkung]

Hi,

I use Client Authentication with Partially authentication option on HTTP traffic.

I found that some client at some time can't connect to web site because pop-up for user authentication didn't show up. (This happen randomly)

I use tcpdump on CheckPoint and found that HTTP traffic is arrive on CheckPoint but CheckPoint response nothing.

Log on SmartviewTracker seems normal.

Any idea to track or solve this problem ?

PS. CheckPoint is in CheckPoint R62 on SecurePlatform in Active/Active ClusterXL environment.

[MarioL]

Never heard of anything like that. Anyway, if you using only HTTP, why not change to User Auth and give it a go?

[ngxadmin]

Reference this case with Checkpoint. I had same issue.

Per my Checkpoint case:
Open guidbedit and change the value of http_max_conn_per_process to 0. Then do an apply.

The value of 500000 is the amount of connections to the security server allowed before that specific process sends a message to the fwd process to kill the security server and restart it. In certain conditions there is a known bug that prevents this message from reaching fwd so the security server exits without restarting. Our developers have found this message to be largely unnecessary and recommend disabling this by setting the value to 0.

This property was not present in older versions such as R55 or R60 but first appeared in R61. In R61, R62, and R65 the default value is 500000.