On 07.12.2011 08:30, a bv wrote: 

> I have a stand alone R70 box
and sometimes its reported /seen that
> some hosts (ex. one proxy stop
accesing net others continue working)
> and sometimes internal web
servers etc are not reached from internet
> etc. I can putty that proxy
, proxy service is running but the box
> cant ping pingable addresses at
the net which normally does And people
> ready to easily blame the
firewall and there is a need to find out the
> real reason (i dont know
if someone is playing on the network or not).
> 
> Is this can be an arp
/entries related issues?
> 
> They say so then I cpstop then cpstart
wait a while and proxy starts
> pinging net (also the network guys are
still on their desk altough its
> not work hours)
> 
> What does cpstop
and cpstart effect? Does it clear arp cache?

Check the output of `arp
-a` and `fw ctl arp`. 

Also do a policy install. If a policy install
solves the issue then you have another device that is loosing arp
entries and gets them set again by the policy install. 

Hugo. 

--

[email protected] http://hugo.vanderkooij.org/
PGP/GPG? Use:
http://hugo.vanderkooij.org/0x58F19981.asc
  

Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

Reply via email to