sec remote not working after cluster upgrade

[tdvit]

Hi,

I have upgraded the primary firewall in a vrrp cluster to ngx r65 from NGAI R55FP3. Since going live with it secure remote users get a message saying no response from the gateway.

in the tracker I can see the request coming in from the internet and it being accepted. but not drops. when I do a tcpdump on the interface I can see the isakamp request but nothing else after it timed out.

I have a central 500 user secure remote license attached to the gateway. I even put an eval on it incase it was a licensing issue. still nothing.

any ideas

[mcnallym]

Are the users able to update the site at all? As I normally recommend that this is done after an upgrade.

[tdvit]

no they cant create a new site. communication with site times out.

I noticed after upgrading from FP 3 to NGX R65 when I edited the object properties to correct version number it took out my IP pool nat settings so I had to put them back in manually. I wonder if it changed anything else.