NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW-1] VPN is still getting down



Hi,
 
since a couple of weeks I have a really interesting case, which seems to have no solution.  Checkpoint is still analyzing the fwinfo files... 
 
      A                                             B
|------------------|                         |------------------|
| FW-1 4.1 SP5     |         VPN             | FW-1 4.1 SP5     |
| Firewall-Cluster | <------------------->   |                  |
| IPSO             |                         | IPSO             |
|------------------|                         |------------------|
        |
        |
|--------------------|
| NG SP3             |
| Management Station |
| Solaris            |
|--------------------|
 
There is a VPN from A to B, which still stops working after a couple of time. The packets on firewall B will be droped by the last rule and the packets on firewall A will be droped as well with the message "encryption failure. error occured.". I stop the FW-1 demons on firewall B and on the Management Station, I do a putkey and then a fwstart. I reinstall the policy on firewall B and after a while the VPN works again...
The CPU and Memory seem to be allright and the disks are just 74% used. No core dumps and no any messages in the log files.
I 've  planed to upgrade the firewall cluster to NG, but I guess that would not solve my problem.
Any idea guys?
 
Thanks in advance!
Radu


 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.