CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We've already had our first sign-ups!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 6/9, 7/14, 8/25, 10/6, 11/3, 12/8.
3. We have new forums in Portuguese and German (see below).
4. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
5. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Content Security/Security Servers/CVP/UFP
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-04-03
ngurjar ngurjar is offline
Junior Member
 
Join Date: 2008-04-02
Posts: 1
ngurjar has an average reputation (10+)
Default CHeckpoint issue

Hi,

We have our internal Exchange server which is accesible from the Internet on Exchange OWA public ip. We have a strange issue from 4 days. We are unable to connect to the exchange OWA from Internet. The Checkpoint fw acts as a tcp proxy, proxying the initial three-way handshake between the server and the client. It resets after the second (syn/ack) packet on both sides. Can u help us why is the fw resetting the conenction on both sides?

ANy light? It was working all the while till 4 days ago. Also, it works properly for a new exchange server that we built as a work around.
Reply With Quote
  #2 (permalink)  
Old 2008-04-03
mcnallym mcnallym is offline
Senior Member
 
Join Date: 2007-06-04
Posts: 805
mcnallym has an average reputation (10+)
Default Re: CHeckpoint issue

Are you using the http security server to provide the tcp proxy for this. If so I would advise that you just get rid of that and just use the Static NAT through the Check Point.

The http security server has always caused me nothing but trouble with OWA to the point where I refuse to implement it.
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 16:37.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0