Help with error - FW-1: Virtual defragmentation error: Packet pool

[wassuupp]

Hello,

Our remote firewall, with which VPN tunnel is setup, hangs and gives the following error in the event viewer. Rebooting fixes the problem for couple of days and then hangs again.

Error: FW-1: Virtual defragmentation error: Packet pool

Error is similar to http://oldfaq.phoneboy.com/gurus/200011/msg00145.html

Remote firewall is running fw1 NG FP3 on Windows 2003....management station is installed at a different location.

Any help is much appreciated.

Thank you.

[chillyjim]

At a minimum get the latest HFA on the box. You should really consider upgrading as FP3 is technically end-of-support. Also get the gateway off of windows, it just consumes too many system resources.

[stewilliamson]

Not sure if this is exactly the same error, so will post as a new message aswell.

We have Checkpoint AI R55 and lots of remote clients using Securemote (some have r56 and some have r62).

The clients are noticing an extremely slow network browsing experience, and the packets are being dropped and logged as "Virtual defragmentation error:"

I believe this has something to do with the MTU size and the fragmentation of UDP packets.

I've used the utility "MtuAdjust.exe" (which, strangely, is in the %programfiles%\Checkpoint\Securemote\bin folder but only on r56 version) and reduced the MTU from default 1500 to 1400.

A reboot later and the speed seems a lot faster. I'm still getting a few packets dropped but not as many as before. Perhaps I will reduce the MTU even further if problems persist.