[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW-1] VPN is still getting down
Hi,
since
a couple of weeks I have a really interesting case, which seems to have no
solution. Checkpoint is still analyzing the fwinfo
files...
A
B
|------------------|
|------------------|
| FW-1
4.1 SP5
|
VPN |
FW-1 4.1 SP5 |
|
Firewall-Cluster |
<-------------------> |
|
| IPSO | | IPSO
|
|------------------|
|------------------|
|
|
|--------------------|
| NG
SP3
|
| Management
Station |
|
Solaris
|
|--------------------|
There is a
VPN from A to B, which still stops working after a couple of time. The packets
on firewall B will be droped by the last rule and the packets on firewall A will
be droped as well with the message "encryption failure. error occured.". I stop
the FW-1 demons on firewall B and on the Management Station, I do a putkey
and then a fwstart. I reinstall the policy on firewall B and after a while the
VPN works again...
The CPU and
Memory seem to be allright and the disks are just 74% used. No core dumps
and no any messages in the log files.
I 've planed to upgrade the firewall
cluster to NG, but I guess that would not solve my problem.
Any idea
guys?
Thanks in advance!
Radu
|