RE: [FW1] Unknown established TCP packet

[Amin Tora <Amin@FW1-NOSPAMEPLUS.com>]

>....and it's that 60s that I can't get an answer out of anyone (my support
>people) on how to increase it.
>I had connections drop for only a few applications, and the only thing I
can
>attribute it to is this initial, short timeout.

Stephen,

You can increase the 60s timeout by editing Objects.C - edit:

:tcpstarttimeout (60)

It will be in the props section.  

However, do keep in mind that increasing this will cause the firewall to
store connections in the state table longer (connections that really don't
transfer data over the connection) - therefore, it could introduct
performance issues.  

Overall, if your client/server apps are not initiating traffic over the
connection after the SYN,SYN/ACK,ACK sequence within 60s for valid reasons,
then this really isn't the issue - I would find out why rather than
increasing this setting.

Good luck,

Amin Tora, CISSP
ePlus Technology
http://www.eplus.com
NASDAQ: PLUS



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================