Internal Hosts cannot connect and vice verca.

[usmanshaikh]

Hi Experts,

We repalced our CheckPoint 4.0 running on Win NT (not an ideal confiugration running CP on Windows) to a checkPoint NGX HFA_04 running on SPLAT, but after the change the internal hosts could not connect to the outside world and vice verca.The firewall module itself could connect to anything. None of the hosts in the internal network could ping the firewall's default gateway i.e the router. However they could connect to firewall on both the interfaces.Here is what our network looks like

Internal Network 195.x.x.0/24
Default GW 195.x.x.1 (The FWs internal interface)
FW Ext Interface 194.x.x.13
FW's defaukt GW 194.x.x.1

I did an unloadlocal to make sure the policy doesn't block anything, but no joys..Also the arp cache on the router was cleared as well.

We tested this setup in a lab and we could ping the default GW of the FW i.e. 194.x.x.1.

When I did a traceroute from my NGX the packet were going via 194.x.x.123 and not via 194.X.X.1 (default GW)..Strange !!!

Is this a similar issue to this one.
http://cpug.org/forums/showthread.php?t=1906

I finally gave up and rolled back the change and brought the Windows box back live and everything works fine..The router doesnt seem to like the new hardware may be.

Any ideas as to what is going on here.

Thanks
Usman