CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 5 of 5

Thread: R60-R65 upgrade ssl drop

  1. #1
    Join Date
    2007-10-19
    Posts
    15
    Rep Power
    0

    Default R60-R65 upgrade ssl drop

    I moved server boxes and also upgraded from R60 to R65.

    Once a user would connect it could stay connected for anywhere between 5 minutes to 2 hours. All sessions would drop at same time.

    Logs didn't show anything.

    Old server had 10/100 NIC cards the new one Gigabit network cards.

    We made a change to set the Public NIC to 100 MB full duplex to match the router.
    We still had the same problem.

    SecureClient was able to work.

    The new R65 firewall also to had a Connectra CM license - but where going to connect the original way of connecting to gw.ip.address

    Has anyone else seen this issue?

  2. #2
    Join Date
    2005-08-29
    Location
    Upstate NY
    Posts
    2,720
    Rep Power
    17

    Default Re: R60-R65 upgrade ssl drop

    Haven't seen this one but there there are some changes to SNX in HFA01 (HFA02 is current), it might be worth a quick try if you haven't installed it yet.

  3. #3
    Join Date
    2007-10-19
    Posts
    15
    Rep Power
    0

    Default Re: R60-R65 upgrade ssl drop

    turned out to be bad on-board NIC

  4. #4
    Join Date
    2007-10-19
    Posts
    15
    Rep Power
    0

    Default Re: R60-R65 upgrade ssl drop

    Update:
    We tried again after motherboard replace and we had worse issues.

    It appeared to be fine in Parallel testing mode, but when thrown into live environment with heavy load and traffic, lots of things did not work and connectivity to servers or the firewall web admin were slow.


    We did here from a consultant who helped troubleshoot say that the Broadcom NIC cards have issues and Intell should be used.

    Has anyone else experienced this issue?
    Dell 1950 Poweredge server or problem with Broadcom NIC's

    ready to buy a 4port Intel nic card and hopefully that will be it.


    Link to new thrhead in Interoperablity.
    http://www.cpug.org/forums/interoper...adcom-nic.html
    Last edited by kevindri; 2008-02-04 at 13:02.

  5. #5
    Join Date
    2006-01-25
    Location
    Americas
    Posts
    1,535
    Rep Power
    15

    Default Re: R60-R65 upgrade ssl drop

    I've had good success with Intel Pro 1000s (duals and quads). I've definitely have had issues in the past with cards that are not on the Hardware Compatibility list (NICs), so I highly recommend you use something from that list. I don't see your broadcomm on there so I would not recommend using it.

    HTH
    Its all in the documentation.

Similar Threads

  1. Telnet Timeout - Drop
    By ktsummey in forum Check Point SecurePlatform (SPLAT)
    Replies: 5
    Last Post: 2010-05-15, 10:01
  2. Drop in-progress connection
    By ttran in forum Check Point Safe@Office Appliances
    Replies: 0
    Last Post: 2009-11-06, 02:56
  3. Call drop issue???
    By kevin_turner in forum Voice over IP Blade (VoIP)
    Replies: 6
    Last Post: 2008-12-18, 18:57
  4. Occasional Drop of Connection RDP
    By menz456 in forum IPsec VPN Blade (Virtual Private Networks)
    Replies: 5
    Last Post: 2008-11-07, 13:56
  5. R65 drop alerts
    By riddaz84 in forum SmartView Tracker
    Replies: 1
    Last Post: 2008-10-01, 08:48

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •