Communication issues until cpstop is performed

[riddaz84]

Hi,
I have 3 clusters of 2 firewalls.
1 firewall in each cluster i am able to ping from the smartcentre server.
The other firewalls aren't pingable although SIC is established on each firewall.
When I do a cpstop i can ping but then the connection to smartcentre is lost.

Does anyone have any suggestions on how to get around this please?

In addition, Smartview Monitor is giving us 'Bad Reply' messages to each firewall.

Any ideas?! Hope to hear from you soon.

Thanks,
Matt.

[Routerkid1]

Please make sure you have a rule to allow icmp from the SC to all the firewalls or look in Policy >Global Properties> and turn on allow icmp requests before last.

Let me know if that works.

[riddaz84]

Hi,
Thanks for your reply.
The reason I think the problems were faced was because i chose the Checkpoint Express option rather than Checkpoint Pro. As soon as I reinstalled Checkpoint Pro it worked no problem and the 'bad reply' messages went away.

Thanks again,
Matt.