[FW-1] Nokia HA 'out of state' TCP sessions after 1 minute

[Ben Smith <fw-1-mailinglist@FW1-NOSPAMBENSMITH.FASTMAIL.FM>]

Firewall-1 Gurus,

I have 4 HA (using VRRP) pairs of Nokia IP710s running NG FP2 on IPSO 3.6
and am experiencing pages and pages of 'packet out of state' entries.
I've read the (many) previous reports of this 'problem' but don't believe
I have an asymetric routing (packets are dropped when telneting to the
physical interface of a firewall in the same subnet) and the problem is
experienced with all protocols/servers we are using (they can't all be
breaking the rules can they?).

I'm aware that I can allow out of state packets, but feel that telnet
sessions hanging after only 1 minute (set to 10hrs in the policy) and
firewalls dropping their own NTP requests is pointing to a bug or
incorrect set-up.  To make matters worse I am without a support agreement
for the moment, although we are in the process of purchasing one.

Any help or suggestions would be appreiciated,

Ben

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================