NGX dropping GRE - PPTP broken

[Markhawks]

Hello Checkpoint Gurus,

We just completed an upgrade from R55 to R60, where we built out a new gateway, and migrated the existing policy over to the new gateway. When we brought up the gateway Monday, we noticed that all the existing PPTP connections stopped working.

We then added a rule explicitly allowing PPTP services (NGX has a predefined Service group with pptp-tcp and GRE in it). The rule fires, and the log shows these connections as allowed, but they do not ever connect successfully.

On further analysis, we see that GRE configuration requests (identified in Sniffer as LCP Configure Requests) are not getting through. The gateway drops these requests both ways.

We have a ticket open with Checkpoint, but I wanted to see if anyoine else had experienced this issue. Any ideas?
thanks in advance,
Mark

[vadirajj]

any update from Checkpoint ?, the NGX release note states that its been fixed in NGX.However the problem continues. Earlier one had to lot of work to make it work in R55, which was incorporated in NGX by default. But GRE ( protocol 47 ) still doesnt work when u Hide NAT. With Static NAT it works..

[chillyjim]

Try HFA-03 for R60. I seem to remember reading something about pptp in one of the sets of release notes.

[meersau]

Does it works with R60 HFA 03, I did not find anything about it in the Release Notes.

[crucial]

I also appear to be having this issue. We have R60 HFA04.

[gfont96]

Hello,

We are running NGXR60 HFA04 and i have a rule that allows internal host to an external host with the pptp group and all appears to be working. I didn't do an upgrade but a clean install.

Not much help I know !, but thought i'd let you know its working here.

Cheers,

George