Hi Michael, Please check the smart defense option located under under HTTP Protocol Inspection and select Configurations aplly only to connetions related to resource used in the Rule base and repush policy. This should fix the problem.
Nokia dose packet based load balancing for http and this will not work together http smart defence inspection. If you need to use the http smart defence feature you need to modify modify the behavior of the loadbalancing form packet to session. Please refer as well to Nokia Resolution 17789. Hope that will solve your problem. Greez, Mark William Lane -----Urspr�ngliche Nachricht----- Von: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] Im Auftrag von Michael Schwartzkopff Gesendet: Donnerstag, 13. Mai 2004 09:26 An: [EMAIL PROTECTED] Betreff: [FW-1] Strange problem with http protocol Hi all, I have a strange problem with the http protocol. System: 2 Nokia in a cluster, mforward, dynamic load balance. Checkpoint NG AI R54. When I do snmp, pop3, domain, ... no problem. Only when I try to http to a website then one node processes the out packets (SYN) and when the answer packet comes in (SYN/ACK) the other node (!) sends back a RST and terminates the connection. http -> advanced options sync is enabled. Any ideas what might be wrong ? Help needed. Thanks for any hints. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
