After upgrade to R65, Adobe Connect (Flash Media Server) doesn't work

[eschreque]

After ugrade from FW1 NG R55 to NGX R65
a client cannot connect to our Adobe Connect Flash Media Server.

In Smartview Tracker, all is right : no drop, the connection is accepted.

The direct connections (not through the gateway) to the server are working.

Any ideas ? Thanks.

[melipla]

Is the host NAT'ed?

[eschreque]

Originally Posted by melipla

Is the host NAT'ed?

No NAT.

Additionnaly, if we don't apply SmartDefense on the gateway : same issue

[melipla]

From the firewall command line try using fw monitor to identify where the traffic is failing:

fw monitor -e "accept ((src=<client IP>) or (dst=<client IP>));"

You should see the initial request and the adobe server response. If you don't see a response then you may need to use Wireshark on the adobe server and see if the external client request makes it from the firewall to the server.

HTH

[eschreque]

Originally Posted by melipla

From the firewall command line try using fw monitor to identify where the traffic is failing:

fw monitor -e "accept ((src=<client IP>) or (dst=<client IP>));"

You should see the initial request and the adobe server response. If you don't see a response then you may need to use Wireshark on the adobe server and see if the external client request makes it from the firewall to the server.

HTH

I found a solution.

Flash Media Server needs a connection with port 1935-TCP (FlashComServer in Checkpoint terminology).
Editing this ports->Advanced, the protocol type was "H.323_Any"
I replaced it with "none" and it works.

But before that in SmarView Tracker, all connections were accepted, nothing was rejected.

[melipla]

Originally Posted by eschreque

Editing this ports->Advanced, the protocol type was "H.323_Any" I replaced it with "none" and it works.

Ah yes, I think every Check Point admin has to do this sooner or later....

Glad you found the cause!