CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Miscellaneous
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2005-12-12
Junior Member
 
Join Date: 2005-12-06
Posts: 6
Rep Power: 0
jolly01 has an average reputation (10+)
Default NGX http failing intermittently

Recently upgraded my R55 installation to NGX R60 build 418. Now HTTP requests stop responding after time. Problem is intermittent, anywhere from 30 minutes to a day or so. Issuing a cpstop/cpstart or rebooting the server fixes problem. When problem is occurring, I can still ping the firewall from internal client and ping internet hosts from the firewall. From the firewall I can resolve internet DNS entries. SMTP mail is still flowing in and out also.

Configuration:
Firewall-1 NGX R60 build 418 running on Windows Server 2003 SP1

Internal client>>>Trend Micro Interscan Web Security Server(IWSS)>>>Firewall>>>DSL modem

Internal client's Internet Explorer is configured with a proxy server setting of the IWSS server. The IWSS server is configured with the firewall as an upstream proxy. The firewall has a rule with an http resource allowing http traffic. Hide NAT is being performed by the firewall. The logs don't show anything unusual.

My fix was to wipe the server, reload Windows 2003 without SP1 and reinstall R55. No problems at all with this version.

Thanks
Brian
Reply With Quote
  #2 (permalink)  
Old 2005-12-12
Senior Member
 
Join Date: 2005-08-22
Location: Ottawa, Canada
Posts: 347
Rep Power: 4
Lackie has an average reputation (10+)
Default Re: NGX http failing intermittently

I have not heard of an issue like this with NGX. If you try it again, I would put on HFA_01, it may have some kind of fix for the security server that will prevent this from happening.
Reply With Quote
  #3 (permalink)  
Old 2005-12-14
Junior Member
 
Join Date: 2005-09-30
Posts: 23
Rep Power: 0
justin.knox has an average reputation (10+)
Default Re: NGX http failing intermittently

HFA_01 really does make an enormous difference to R60. Not the least of which is supported compatibility with Windows Server 2003 SP1. R60 Build 418 is not supported on Windows 2003 SP1 -- so YMMV.

Incidentally, I had similar problems with http/https being blocked intermittently. I am running R60_HFA_01 in production now. I had a rule in place to block by listed IP address some sites that the powers that be wanted blocked, and I would get seemingly random hits on that list with sites that were not _in_ that list. My workaround was to disable it and log the http traffic for off-line searching later.

Due to other issues I appear to be having with R60, I may be back-revving to R55 myself.
Reply With Quote
  #4 (permalink)  
Old 2005-12-14
Junior Member
 
Join Date: 2005-09-05
Posts: 1
Rep Power: 0
kap05 has an average reputation (10+)
Default Re: NGX http failing intermittently

Hi All,


Im also facing the same issue - browsing to sites fails intermittently . I have an NGX HFA_01 on Windows 2003 platform .

One more thing i noticed, some machines behind the FW can browse whereas some cant when this happens . "Unable to connect to the WWW server " is the message that is displayed by the browser.

Anyone has the solution ....

KAP.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 21:15.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0