Joe, Let me get this straight... Are you saying that Juniper TAC support is just as bad, if not worse, than Checkpoint TAC? I haven't dealt much with Juniper because I only have to manage two high-end AS-5200 boxes and I agree with you their TAC is pretty bad but I think Checkpoint TAC is the worst. After 3 months of investigating 3 TAC cases, Checkpoint TAC engineers came back and admit to me that this is a F! bug in their software. Go figure. Enough of my ranting. The problem to fix this, IMHO, is to use VRRP instead of IPSO clustering. That way, you don't have to worry about Active/Active thing cisco4ng
joe smith <[EMAIL PROTECTED]> wrote: From past experiences with Juniper I would not recommend using there products. I think that there support stinks as well, like garbage in NYC after a bad rain storm and a couple days have past. Mark Elsen wrote: Hi , We recently switched our CP Firewall environment, from a Windows 2000 server based solution to a Nokia cluster : - 2x IP380 ( IPSO : 4.0.1-BUILD08 releng 1515 01.23.2006-190719 i386) - CP : NGX (HFA_01) After migration of FW policy, everything went fine, except for our SSLVPN access based on a 'Juniper(Netscreen) Secure Access' box , located on the DMZ. With the Nokia Cluster active, we sometimes get hanging connections to the SSLVPN box, and or login screen not appearing when trying to connect (e.g.). When I pull one node out of the Nokia Cluster, everything goes fine for SSLVPN access thru that dmz-box. Only with the 2 nodes in the Nokia Cluster, it stops working (most of the time, that is). What could cause this problem syndrome ? Thanks for all info, ([EMAIL PROTECTED]) ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= --------------------------------- New Yahoo! Messenger with Voice. Call regular phones from your PC and save big. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= --------------------------------- How low will we go? Check out Yahoo! Messengers low PC-to-Phone call rates. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
