TCP out of state packet issue

[paprichaat]

Hi,

We have a credit card transaction service which on the 1st client attempt just hangs and the log entry shows an out of state TCP packet "First PAcket isnt SYN". On the second client attempt works (if you simply retry) I have checked for asymetric routing, which isnt happening, so I believe it maybe to do with the TCP timeout values for this service. Is there any way of altering these values on a "per service basis"? If I simply switch off the "drop TCP out of state" tick-box, so it allows these packets through, the service works fine, first time. Otherwise, is there an option to switch off out-of-state packet dropping on a per service basis, rather than per gateway?

Thanks.

[gavvys]

Hi
Well if you have Checkpoint secureknowledge access kindly go through the Solution ID: #sk11088 to allow the service and then Checkpoint will not check the TCP out of state for that services.

If you do not have access to Secureknowledge the let me know the Checkpoint version then I will provide you the in detail solution.
I recommend that kindly make the changes properly otherwise it may create a big problem.

I hope this will resolve your issue.

regards
Ranjit