Try removing or putting SmartDefense in monitor only. Also, are you using an http resource to a third party for URL filtering?
Simon Desmeules GoSecure Inc. www.gosecure.ca mailto:[EMAIL PROTECTED] C-514-516-5988 T-514-287-7427 ext 229 F-514-287-9734 1-888-287-7427 24/7 Security Portal: http://www.gosecure.ca/SecInfo/index.html News and Events: http://www.gosecure.ca/en/Press.php -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Brian Hope Sent: Monday, August 07, 2006 10:50 AM To: [email protected] Subject: [FW-1] Slow http traffic and traceroute response Running Check Point SecurePlatform NG with Application Intelligence (R55) Build 110 Dell PE350 I'm having a problem with browsing webpages on our network through our firewall. The problem does not exist if I take the firewall out of the configuration. When I do a traceroute from a client behind the firewall, it hits the first & second hops quickly (internal interface of firewall, then ISP supplied cisco router), then pauses for about 10-30 seconds before returning stats on the next hop. I'm doing a tracert to the IP address, so the problem is not dns. When I use a web browser, it takes a very long time to connect to a website, but once connected to that website, subsequent pages load quickly. When I do the same traceroute from the firewall, it responds quickly, and does not appear to have the same problem. I also tried loading another hard drive on this firewall with NGX and booting to it. Same situation occurs. Any ideas? ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
