| CPUG | |
| The Check Point User Group | |
| A Resource For The Check Point Community. Fast. Useful. Independent. | |
|
| |||||||
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| Recently upgraded my R55 installation to NGX R60 build 418. Now HTTP requests stop responding after time. Problem is intermittent, anywhere from 30 minutes to a day or so. Issuing a cpstop/cpstart or rebooting the server fixes problem. When problem is occurring, I can still ping the firewall from internal client and ping internet hosts from the firewall. From the firewall I can resolve internet DNS entries. SMTP mail is still flowing in and out also. Configuration: Firewall-1 NGX R60 build 418 running on Windows Server 2003 SP1 Internal client>>>Trend Micro Interscan Web Security Server(IWSS)>>>Firewall>>>DSL modem Internal client's Internet Explorer is configured with a proxy server setting of the IWSS server. The IWSS server is configured with the firewall as an upstream proxy. The firewall has a rule with an http resource allowing http traffic. Hide NAT is being performed by the firewall. The logs don't show anything unusual. My fix was to wipe the server, reload Windows 2003 without SP1 and reinstall R55. No problems at all with this version. Thanks Brian |
| |||
| I have not heard of an issue like this with NGX. If you try it again, I would put on HFA_01, it may have some kind of fix for the security server that will prevent this from happening. |
| |||
| HFA_01 really does make an enormous difference to R60. Not the least of which is supported compatibility with Windows Server 2003 SP1. R60 Build 418 is not supported on Windows 2003 SP1 -- so YMMV. Incidentally, I had similar problems with http/https being blocked intermittently. I am running R60_HFA_01 in production now. I had a rule in place to block by listed IP address some sites that the powers that be wanted blocked, and I would get seemingly random hits on that list with sites that were not _in_ that list. My workaround was to disable it and log the http traffic for off-line searching later. Due to other issues I appear to be having with R60, I may be back-revving to R55 myself. |
| |||
| Hi All, Im also facing the same issue - browsing to sites fails intermittently . I have an NGX HFA_01 on Windows 2003 platform . One more thing i noticed, some machines behind the FW can browse whereas some cant when this happens . "Unable to connect to the WWW server " is the message that is displayed by the browser. Anyone has the solution .... KAP. |
![]() |
| Thread Tools | |
| Display Modes | |
| |