Re: [FW-1] Nokia Flows

[Padhu <ccie8340@FW1-NOSPAMYAHOO.COM>]

Flows are enabled for improving performance. So instead of disabling may be
this hotfix would help.

According to Nokia's knowledgebase
"There is a hotfix for this issue, which is available for FireWall-1 4.1 SP5
from Check Point's Software Subscription Download page. FireWall-1 4.1 SP5a
has also been released, which resolves the issue as well. After the hotfix
is applied to 4.1 SP5 or 4.1 SP5 is upgraded to 4.1 SP5a , FireWall-1 will
tell IPSO to send an update every 10 seconds or so to FireWall-1's state
tables, which will cause the connection table entry to refresh if there has
been any traffic on that connection since the last refresh. "

I am looking at similar issues. Increasing TCP_TIMEOUT in init.def also
would help.

Hope this helps.

Cheers,Padhu

----- Original Message -----
From: "Sancho Lerena" <slerena@AOL.ES>
To: <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
Sent: Monday, March 25, 2002 10:34 AM
Subject: [FW-1] Nokia Flows


> Hello,
>
> I'have several problems related with conections cut-off with my firewalls
> based on IPSO/Nokia platfform. I've revised a lot of things and seems to
be
> all ok, but conections continue dropping. I've the theory that it's
possible
> that nokia flows are causing this problems.
>
> Anyone has the same experience ?, comments welcome :)
>
> Un saludo,
>
>         Sancho Lerena
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================