I have had a problem with ng fp2 (no hot fixes) not resetting the connection timer and 
thus every packet is then out of state.  I was told that hot fix 2 fixes this problem 
but I went right to fp3 and that did it for me.  GL.

-----Original Message-----
From: Jason Cameron [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 20, 2003 8:51 AM
To: [EMAIL PROTECTED]
Subject: [FW-1] OUT OF STATE PACKETS


I am currently running a citrix server( on dmz subnet ) with a published app accessing 
another server's  database on a private lan subnet .
These subnets are directly connected to the nokia ip 330 ng fp2 cluster I am running . 
I also have dial-up customer's accessing the
published application on the citrix server.
The problem is I experience a huge amount of " out of state " packets in the fw log 
between the citrix server and the database server on the private Lan ,
I have checked the nic settings on the server s ( set to 100 Full dup ) and on the 
switches there is no auto -negotiation.
I wonder has anyone set up this solution with dialup clients and wan clients using 
citrix published app to access a swift alliance access database ?. I dont understand 
why there would be so many out of state packets ?.
Is the tcp timeout value to low or is it the drop out of state udp packets ?

Thanks

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
Disclaimer - 08/20/2003
This information in this email is confidential and may be legally privileged. It is 
intended solely for Mailing list for discussion of Firewall-1.  Access to this 
Internet email by anyone else is unauthorized.

EnvestnetPMC, Inc. does not accept time-sensitive transactional messages, including 
orders to buy and sell securities, account allocation instructions, or any other 
instructions affecting a client account, via e-mail.

If you are not the intended recipient of this email, any disclosure, copying, or 
distribution of it is prohibited and may be unlawful.  If you have received this email 
in error, please notify the sender and immediately and permanently delete it and 
destroy any copies of it that were printed out.  When addressed to our clients, any 
opinions or advice contained in this email is subject to the terms and conditions 
expressed in any applicable governing EnvestnetPMC terms of business or agreements.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to