[FW1] A bug or a feature?

[Adorno Martin <madorno@FW1-NOSPAMpecom.com.ar>]

Title: A bug or a feature?

We are experiencing some strange things with ftp and https services.
Our head office LAN is conected with 50 remote sites (we have a big wan), all them accessing the Internet trough a Nokia IP 440 -FW-1 4.1 SP2.

We have no problems accesing ftp or http sites from the Head Office LAN. But some remote sites can not access some ftp and https sites. The url´s links that they can not access are HTTPS://xxx.xxxxx.xxx/xx/xxxx/xx.CGI. or FTP://xxx.xxxxx.xxx/xx/xxxxx.CGI. All the Browsers are configured in the same way. We have IE 5.

I disabled IP Spoofing and SYN Defender and it does not work too.
Ah! and I am getting some strange entry in the firewall log:

From: Secure Sites or FTP Sites
Action: Drop
Reason: Unknown Established TCP Packet
I don´t know if the above has a relation with the problem
I think it is a time out problem
Some help will be appreciate!
Thanks,
Martín Adorno - Tecnología 
         ( 43446292
PECOM ENERGIA S.A.