CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Services
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-12-21
NickBrandson NickBrandson is offline
Member
 
Join Date: 2006-12-20
Posts: 83
Rep Power: 2
NickBrandson has an average reputation (10+)
Default Service/connection disconnected after "upgrade" to R60

dear guru,

Have you ever encountered session/connection disconnected after switching to R60 firewall cluster (A-S) on SecurePlatform?
It seems there is some changes hv been made to the kernal, and terminal some tcp session like telnet, remote desktop connection and even the SmartDashboard. we are connecting to the SmartCtr behind the R60 firewall remotely. This does not happen before on R55 Cluster on Windows.

All the latest HFA (HFA04) has been installed on SC & gateways.

Any ideas would be appreciated.
Thanks,
Nick
Reply With Quote
  #2 (permalink)  
Old 2006-12-21
northlandboy northlandboy is offline
Senior Member
 
Join Date: 2006-07-28
Location: New Zealand
Posts: 722
Rep Power: 2
northlandboy has an average reputation (10+)
Default Re: Service/connection disconnected after "upgrade" to R60

Do you mean disconnect after an hour's idle time? Or shorter than that?

Is the cluster maybe flapping? Check your logs to see if you've got active/standby switching frequently. Related to that, check that they're synchronising properly.
Reply With Quote
  #3 (permalink)  
Old 2007-01-14
NickBrandson NickBrandson is offline
Member
 
Join Date: 2006-12-20
Posts: 83
Rep Power: 2
NickBrandson has an average reputation (10+)
Default Re: Service/connection disconnected after "upgrade" to R60

We ever doubted there's some problem with the cluster, sync issue or even the NIC card, the sync interface is connected to hub (does not support multicast)

The cluster seems normal, and we even tried to switch off one of the gateway and it still happened.

It seems there's some setting has been change on the kernal for the timeout value, we are going to take a look of the packets of the source machine and see if there's a reset packet by the firewall or something.

We have configured the tcptimeout value in Global properties, some improvements, but it could not solve.

Quote:
Originally Posted by northlandboy View Post
Do you mean disconnect after an hour's idle time? Or shorter than that?

Is the cluster maybe flapping? Check your logs to see if you've got active/standby switching frequently. Related to that, check that they're synchronising properly.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 19:34.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0