Re: [FW-1] Secure Remote NG FP2 Session drops....

[Brendan Laws <Blaws@FW1-NOSPAMCONTENTWISE.COM.AU>]

John,
 
thanks! would you be able to send me the patch once you get it - i forsee i would go through the same issues to get it and you have a head start!:)
 
cheers
 
Brendan

	-----Original Message----- 
	From: John Biel [mailto:John.Biel@LINAMAR.COM] 
	Sent: Thu 15/08/2002 10:46 PM 
	To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com 
	Cc: 
	Subject: Re: [FW-1] Secure Remote NG FP2 Session drops....
	
	

	I'm dealing with support on this issue right now. The most likely reason
	you're having this is that your firewall object has the private address
	set in "general properties" rather than the external address of the
	firewall. It likely happens when securemote renegotiates the phase 1
	key. One fix is to change the private address to the external one.
	(You can also see the problem if you put a sniffer on the outside of the
	firewall. You'll see that when the renegotiation occurs, the firewall
	will use it's private address as the source address instead of the
	external one.) If you can't for various reasons change the private
	address there is a hotfix that you can get from Checkpoint to fix the
	problem. However I'm having great difficulty in getting it.... I started
	attempting last Friday and still don't actually have it. Checkpoint
	support is pathetic, it took 2 days just to get them to admit that they
	make a fix for this problem, and now it's been another 2 days since and
	I still don't actually have it yet.
	
	-----Original Message-----
	From: Brendan Laws [mailto:Blaws@CONTENTWISE.COM.AU]
	Sent: Thursday, August 15, 2002 3:06 AM
	To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
	Subject: [FW-1] Secure Remote NG FP2 Session drops....
	
	
	Hi,
	
	        I seem to be having an intermitant problem which results in a
	secure remote session being droped, I dont see anything bad in the logs,
	just all of a sudden the session drops, sometimes after 10 minutes,
	sometimes 30.
	
	        In my playing with this a have kept a constat flow of traffic to
	keep alive the connection be it http & icmp
	
	        I am wondering if anyone else has had this problem and if so how
	did you fix it.
	
	Thanks
	
	Brendan
	
	=================================================
	To set vacation, Out Of Office, or away messages,
	send an email to LISTSERV@lists.us.checkpoint.com
	in the BODY of the email add:
	set fw-1-mailinglist nomail
	=================================================
	To unsubscribe from this mailing list,
	please see the instructions at
	http://www.checkpoint.com/services/mailing.html
	=================================================
	If you have any questions on how to change your
	subscription options, email
	fw-1-owner@ts.checkpoint.com
	=================================================
	
	=================================================
	To set vacation, Out Of Office, or away messages,
	send an email to LISTSERV@lists.us.checkpoint.com
	in the BODY of the email add:
	set fw-1-mailinglist nomail
	=================================================
	To unsubscribe from this mailing list,
	please see the instructions at
	http://www.checkpoint.com/services/mailing.html
	=================================================
	If you have any questions on how to change your
	subscription options, email
	fw-1-owner@ts.checkpoint.com
	=================================================
	

¢Ç½§¶*':ëN|çßÇ­¬Êg¬±¨²Çu©Þ¨¥¶‚ÈI4„EYb²Û.±È^rJhŠ{\¢h§¶86(~Ø^zf¢•§]±ë_ÃYšŠX§‚X¬¶z&j)S¢éì®&Þ~º&¶¬™¨¥Šx%ŠËi•æ¬zǶ¢žËk¹Ëb¢{¶m§ÿðÃ!yÉ)¢)ír‰¿±êï‰Çþf¢–)à†Ù!ü¨º¯y©òªç*'²‰á£hr§ì».nÇ+Š›b¢z)¶*'±éWðÖ'z»lrœ’š"ž×(