[FW1] Re: ftp server using random high ports and checkpoint

["Ivan Fox" <ifox100@FW1-NOSPAMhotmail.com>]

Valerie;

Thanks for your input.

My answer in line:
----- Original Message ----- > Ivan -
>

> Is the connection timing out?  That is, do any
> of the files get successfully transferred?

On the ftp server, which is MS IIS 4.0 w/sp6a, we had set the time out to
3600 seconds (60 minutes), we still have the problem.
Some times, the client, NcFTP, could download 100 files, 1400 files, or
6,000 files.  It could never download 10,000 files.

> I've never actually used Firewall-1, but other stateful packet firewalls
have timeouts on the stateengines.  Perhaps it is taking too long and the
firewall is losing state?  sniffing on the wire and looking at the firewall
state tables would help narrow down where exactly you're seeing a problem.

We also set up 3600 seconds on the firewall.

> As a workaround, you might be able to transfer the
> files in smaller bursts (like 100 files at a time, instead
> of 10,000).
>



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================