[FW1] Need some info: "Unknown established TCP packet"

[Matos, Armando]

We are running FW1 w/ sp2. We have three applications adversely affected by our new firewall. These applications work for a while, and then die. These applications are between DMZ’s and all ports are open between these 2 servers. The only thing we see in the log is the "Unknown established TCP packet" message. My understanding of what I read on phoneboy stated that this means the firewall no longer has a TCP session entry in its table for these packets. They also seemed to indicate that the older version of FW1 actually attempted to restore this entry in the table before dropping the packet "on the floor". I was led to believe by what I read that this "fix" would make FW1 v4.1 sp2 run like the old method. Has anyone had this problem and/or workaround to the problem?? Are there any reasons why we shouldn’t apply the fix suggested on phoneboy’s website??  Thanks!!   Armando