CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We've already had our first sign-ups!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 6/9, 7/14, 8/25, 10/6, 11/3, 12/8.
3. We have new forums in Portuguese and German (see below).
4. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
5. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Miscellaneous
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2 Weeks Ago
gbujas gbujas is offline
Junior Member
 
Join Date: 2008-04-26
Posts: 2
gbujas has an average reputation (10+)
Default TCP MSS problem on UTM-1 NGX R62

Hi,
I have CheckPoint UTM-1 NGR R62 running on SecurePlatform. I need to configure UTM-1 to limit MSS value for some packets.

Is it possible?

I found directions for IPSO, but not for SecurePlatform.

Tnks
Reply With Quote
  #2 (permalink)  
Old 2 Weeks Ago
cciesec2006 cciesec2006 is offline
Senior Member
 
Join Date: 2006-09-26
Posts: 508
cciesec2006 has an average reputation (10+)
Default Re: TCP MSS problem on UTM-1 NGX R62

Use dbedit or gui-dbedit to modify this value. I've done it before,
just can not remember off-hand what the exact parameter is at the moment
Reply With Quote
  #3 (permalink)  
Old 2 Weeks Ago
gbujas gbujas is offline
Junior Member
 
Join Date: 2008-04-26
Posts: 2
gbujas has an average reputation (10+)
Default Re: TCP MSS problem on UTM-1 NGX R62

Could you please look up the name. I found only one parametar whit name containing 'mss' and has something to do with VPN
Reply With Quote
  #4 (permalink)  
Old 2 Weeks Ago
cciesec2006 cciesec2006 is offline
Senior Member
 
Join Date: 2006-09-26
Posts: 508
cciesec2006 has an average reputation (10+)
Default Re: TCP MSS problem on UTM-1 NGX R62

please modify the fw_clamp_tcp_mss from "false" to "true". That will apply to
all, you can not pick and choose in SPLAT
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 00:52.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0