JF,
There are some issues regarding Pix<->fw1 vpns that are solved in FP3
HF2. This is described in sk18456 ("What to do when a VPN tunnel between
PIX and Check Point GateWay sporadically fails").

Lars

-----Original Message-----
From: Jean-Francois Gobin [mailto:[EMAIL PROTECTED]
Sent: 9. oktober 2003 19:59
To: [EMAIL PROTECTED]
Subject: [FW-1] Strange behaviour of a VPN between a PIX and Checkpoint
NG/FP3


Hello all,

We have a really strange phenomenon in a VPN between a PIX and a
Checkpoint module (NG/FP3).

>From time to time, the VPN stops working. IPSEC packets come in, but are
dropped (reason : "No valid SA"). And for each packet being dropped, a
packet "Delete IPSEC SA" is sent from the Checkpoint.

Fortunately, the solution is not really difficult : recompiling. But
every
times, the guy at the other site rings like hell ...

Any idea ?

JF

--
Jean-Francois Gobin - Administrateur gobinjf.be
http://www.gobinjf.be   mailto:[EMAIL PROTECTED]

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to