[FW-1] OUT OF STATE PACKETS

[Jason Cameron <jasonc@FW1-NOSPAMFIN-X.COM>]

I am currently running a citrix server( on dmz subnet ) with a published app accessing another server's  database on a private lan subnet .
These subnets are directly connected to the nokia ip 330 ng fp2 cluster I am running . I also have dial-up customer's accessing the 
published application on the citrix server.
The problem is I experience a huge amount of " out of state " packets in the fw log between the citrix server and the database server on the private Lan ,
I have checked the nic settings on the server s ( set to 100 Full dup ) and on the switches there is no auto -negotiation.
I wonder has anyone set up this solution with dialup clients and wan clients using citrix published app to access a swift alliance access database ?. I dont understand why there would be so many out of state packets ?.
Is the tcp timeout value to low or is it the drop out of state udp packets ?

Thanks

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================