FTP to and from SPLAT Servers

[mcnallym]

I keep getting my FTP transfers too and from my SPLAT Servers timing out.

They are done from the command line in expert mode via an SSH session

I can FTP to and from the same FTP Server from Nokia Appliances without trouble.

Interfaces are hard coded. I am not running any FTP Security Servers.

It is a lot quicker then the session timeout settings for the admin sessions so I don't believe that it is this.

Not seeing anything in the tracker, and is transferring most of the file, but not all.

Any Idea's?

[cciesec2006]

I encounter no such issue. What version of SPLAT and HFA?

[Expert@P1-NG]# fw ver
This is Check Point VPN-1(TM) & FireWall-1(R) NG with Application Intelligence (R55) HFA_17, Hotfix 670 - Build 005
[Expert@P1-NG]# ftp 192.168.15.10
Connected to 192.168.15.10 (192.168.15.10).
220 (vsFTPd 1.2.0)
Name (192.168.15.10:admin): anonymous
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> bin
200 Switching to Binary mode.
ftp> prompt
Interactive mode off.
ftp> cd Images_CD
250 Directory successfully changed.
ftp> ls *55*
227 Entering Passive Mode (192,168,15,10,15,118)
150 Here comes the directory listing.
-rwxr-xr-x 1 0 0 168953856 Oct 20 2007 P1_SPLAT_R55.iso
226 Directory send OK.
ftp> get P1_SPLAT_R55.iso
local: P1_SPLAT_R55.iso remote: P1_SPLAT_R55.iso
227 Entering Passive Mode (192,168,15,10,12,82)
150 Opening BINARY mode data connection for P1_SPLAT_R55.iso (168953856 bytes).
226 File send OK.
168953856 bytes received in 215 secs (7.7e+02 Kbytes/sec)
ftp> quit
[Expert@P1-NG]#

[mcnallym]

Is the R65 no HFA.

Is an Intel Pro 1000GT Quad card with the interfaces hard set. It appears to be OK.

I am trying to ftp the hfa02 to the box.

[cciesec2006]

I am also using Intel Pro 1000GT and I have no issues:


[Expert@NGx-gw1]# dmesg | grep eth0
e1000: eth0: e1000_probe: Intel(R) PRO/1000 Network Connection
e1000: eth0: e1000_watchdog: NIC Link is Up 1000 Mbps Full Duplex
e1000: eth0: e1000_set_tso: TSO is Disabled
e1000: eth0: e1000_watchdog: NIC Link is Up 1000 Mbps Full Duplex
e1000: eth0: e1000_watchdog: NIC Link is Down
e1000: eth0: e1000_watchdog: NIC Link is Up 1000 Mbps Full Duplex
[Expert@NGx-gw1]# cd /var/tmp
[Expert@NGx-gw1]# ftp 192.168.15.8
Connected to 192.168.15.8 (192.168.15.8).
220 Microsoft FTP Service
Name (192.168.15.8:admin): anonymous
331 Anonymous access allowed, send identity (e-mail name) as password.
Password:
230 Anonymous user logged in.
Remote system type is Windows_NT.
ftp> bin
200 Type set to I.
ftp> prompt
Interactive mode off.
ftp> hash
Hash mark printing on (1024 bytes/hash mark).
ftp> ls *65*
227 Entering Passive Mode (192,168,15,8,19,103).
125 Data connection already open; Transfer starting.
01-04-08 02:56PM 518586368 CheckPoint_NGX_R65_P-1_SPLAT_Linux30.ISO
10-30-07 10:21AM 685047808 CheckPoint_NGX_R65_Suite_SPLAT_Linux30.ISO
04-14-08 01:08PM 696975360 CheckPoint_NGX_R65_Suite_SPLAT_Linux30_26kernel.is o
02-01-08 10:55PM 17067767 fw1_R65_hf_ha02_249.linux.tgz
04-13-08 01:47PM 114124860 Provider-1_R65_HFA_02_wrapper.linux.tgz
01-30-08 06:29PM 119222000 Provider-1_R65_HFA_02_wrapper.SecurePlatform.tgz
12-07-07 12:25PM 125047498 VPN-1_R65_HFA_02_wrapper.linux.tgz
02-01-08 07:15PM 136142208 VPN-1_R65_HFA_02_wrapper.SecurePlatform.tgz
04-12-08 01:33AM 2881859 Web_Visualization_Tool_R65.linux.tgz
226 Transfer complete.
ftp> hash
Hash mark printing off.
ftp> get VPN-1_R65_HFA_02_wrapper.SecurePlatform.tgz
local: VPN-1_R65_HFA_02_wrapper.SecurePlatform.tgz remote: VPN-1_R65_HFA_02_wrapper.SecurePlatform.tgz
227 Entering Passive Mode (192,168,15,8,19,104).
125 Data connection already open; Transfer starting.
226 Transfer complete.
136142208 bytes received in 27.2 secs (4.9e+03 Kbytes/sec)
ftp> quit
221
[Expert@NGx-gw1]#
[Expert@NGx-gw1]# uname -a
Linux NGx-gw1 2.6.18-22cp #1 SMP Tue Oct 2 15:01:11 IST 2007 i686 i686 i386 GNU/Linux
[Expert@NGx-gw1]# fw ver
This is Check Point VPN-1(TM) & FireWall-1(R) NGX (R65) - Build 477
[Expert@NGx-gw1]#

[steve4631]

I too have had problems with putty on SPLAT R65. Spoke with Checkpoint and they gave me the fix.

Connect into the SPLAT box as admin. Don't connect as expert. While in admin mode, type the word idle. This will give you the idle setting on the SPLAT box. Default is 10 minutes. To change it, just type idle 30 idle 60
or however long you want to keep the session open, up to 999 minutes.