High latency via checkpoint firewall

[bravobritto]

Hi Gurus

We are using Checkpoint R55 with NSF 6416 box. We are getting high latency through this ( eg: 250ms for 32 bytes of ping ) and packet dropping for SUN servers if the packet size exceeds beyond 1468 bytes. Both these gets resolved if we bypass the firewall. But bypassing firewall is not a permanent solution ( as it involves security risk also ). Kindly suggest which parameter file do I need to edit to resolve this issue. Earlier we had ftp data transfer problem with few SUN servers and we resolved it by changing a parameter file in Checkpoint (with the help of secure knowledge from Checkpoint ). For the present scenario issue we couldn't get much information from Checkpoint sk.

So kindly help us asap.

Thanking you all in advance.

Regards
Britto Sidhan

[gavvys]

Hi
Try disabling the SmartDefence, I know this is not the resolution, I will let you know the exact parameter for this to be changed.

Regards
Ranjit

[bravobritto]

Hi

Thanks for your reply. I think latency problem is not caused by the firewall. We will isolate the network element causing latency by tomorrow.

As per your reply we are waiting for the parameter file to be changed, to resolve the packet size problem to SUN server.


Thanks and Regards
Britto Sidhan