CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We've already had our first sign-ups!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 6/9, 7/14, 8/25, 10/6, 11/3, 12/8.
3. We have new forums in Portuguese and German (see below).
4. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
5. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Miscellaneous
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 3 Days Ago
Chuck.Reimer Chuck.Reimer is offline
Junior Member
 
Join Date: 2007-02-22
Posts: 1
Chuck.Reimer has an average reputation (10+)
Default Slow File Copy Issue across vpn tunnel

I am copying a 5 meg file across a permanent tunnel (vpn) from server A (behind a UTM-1 running NGX R65) to server B (behind a Nokia IP380 running NGX R65).

The issue I am having is when I copy the file (power point files seem to be the worst) the copy window on server B pops up about 4 minutes after I have clicked paste.

The reverse is true on the other end of the tunnel. When I click Paste on server A the copy window appears immediately, but when the copy hits 0 seconds remaining it waits 4 minutes and then finishes the copy.

The UTM-1 has a 10/1 internet connection.

The IP 380 has a 9/2 internet connection.

My guess is there is some kind of caching issue on the IP 380 but I am at a loss finding it.

Does anyone have any ideas?
Reply With Quote
  #2 (permalink)  
Old 1 Day Ago
melipla melipla is offline
Senior Member
 
Join Date: 2006-01-25
Posts: 655
melipla has an average reputation (10+)
Default Re: Slow File Copy Issue across vpn tunnel

Its a known issue. Taken from sk32651, issue this [SPLAT] command to the NGX gateway(s):
fw ctl set int fwtcpstr_max_window 65536

That setting won't survive reboot, but if it fixes your problem, edit the $FWDIR/boot/modules/fwkern.conf file (create a new one if it doesn't exist) and add this line:
fwtcpstr_max_window=0x10000

Which should set the parameter after each boot. Took me forever to solve that one. Be aware that changing that parameter affects the performance of Smart Defense, which is the primary reason why its not "fixed" by default.
__________________
Its all in the documentation.
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 22:17.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0