There are some issues with IPSO 3.4 with Checkpoint
4.1 SP4 due to some disconnect between fw-1 state tables and
nokia's
IP flow tables. Lots of rule 0 drops with
unknown established messages in the log. Looks like their SP5a will fix
it.
In the interim, I disabled flows by running ipsofwd
slowpath at the command line. However i would like to know how i can do
this
permanently so that it stays after reboot
also with ipsofwd slowpath. Any ideas ?
Cheers,Padhu
|