Re: [FW1] vpn drops after 20 minutes

[Jason Maley <jmaley@FW1-NOSPAMcornerstones.com>]

Mathias Wittwer wrote:

> Hi all
>
> we are using in a enviroment IPSO 3.3, cp4.1sp2 on several vpn210-440 boxes.
>
> we are also using metaframe apps citrix, ms terminal services over these
> tunnels. I do now experience that the vpn connection drops after around 20
> minutes use for about 20 seconds and gets back after this timeout. I
> verified the connection between both routers ISP, which are on front of
> these fw's (they are owed from us). the link is up and the external ip
> address of the fw can be always reached.
>
> Any ideas?
>
> Thanks!
> Matt
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================

Matt-
    Just a thought, but you might want to consider turning off flows.  There are
some incompatabilities with flows and CP related to tcp timeouts.  This can be done
by issuing the command "ipsofwd slowpath".  This won't survive a reboot, however,
if you need to make this change permanent, there are a couple of files to change
that slip my mind right now (reply if you want them and I'll look them up).   To
re-enable flows, you need to issue "ipsofwd flowpath".

Hope this helps.
Regards,
Jason



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================