Hello all, I have upgraded a pair of Nokias (doing high availability) to NG FP3 and since then I've been getting lots of "tcp packet out of state" messages. The drops are so many that one of the web servers dissapears from the Internet. The previous version of FW-1 was 4.1 SP1. I was seing "unknown established packet" messages now and then, but nothing like the rate of messages I see when using FP3. I did a search in google and found that a lot of people have the same problem. I know it is possible to disable the stateful feature of the firewall, but I'd rather not (it is a stateful firewall after all). There are no asymmetric routing issues or anything like that. Has anybody heard anything from Check Point about this issue? I would be grateful for any advice.
-- Haris Klitiropoulos Data Communication Engineer Space Hellas S.A. ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
