Re: [FW1] Interoperability issues with CacheFlow server

[Jason Witty <jason@FW1-NOSPAMwittys.com>]

I'm running this exact configuration with no troubles at all.  I have the
internal side of the CacheFlow plugged intop the internal FDRY switch, and
the external leg of the CacheFlow plugged into my publically IPed DMZ.
Then I just had to allow the CF's external IPs to leave the network via a
simple FW rule.  What exactly are you seeing?  Are you using the Check
Point security servers in conjunction with this or are they turned off
(they're off on mine, dunno if that matters).

Jason

At 09:35 AM 11/29/00 -0500, Lanspery Bradford G CONT DLVA wrote:
>
>I'm  experiencing a problem with a web caching solution on the network,
>which uses a Cache Flow caching server, and Foundry ServerIron switch
>positioned behind a FW-1 4.1 SP2 running on Solaris7 on a Sparc platform and
>in front of the head internal router (Cisco 7500).
>
>The Foundry switch redirects all port 80 traffic to the cache server
>transparently.
>Without going into too much detail, depending on how this switch is
>configured,
>I experience transaction drops on the firewall ranging from IP spoof alerts
>to TCP ACK drops, to SRC/DST reflected only by cache server IP address. All
>the while there are varying degrees of success (most often failures) for
>internal client web browsing with this configuration in line. 
>
>Would like to hear from anyone who has experienced similar problems and
>solutions applied. Thanks.
>
>
>Bradford G. Lanspery
>Network Operations - T11
>Network Systems Programmer
>NCI Information Systems, Inc.
>Phone>
>
>
>===========================================================================
=====
>     To unsubscribe from this mailing list, please see the instructions at
>               http://www.checkpoint.com/services/mailing.html
>===========================================================================
=====
>
>


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================