This allows you to specify how long FW-1 will wait for all the pieces of a fragmented packet to be reassembled before considering the packet fragments lost.  It will tie up buffers if you increase it, but if the interconnecting network is experiencing long delays (ie. satellite,) then you will need to allow for a little bit more time.

Regards,
CryptoTech

Elaine Lolos wrote:

Hello, I was wondering if someone could tell me what the setting "fwfrag_timeout" is used for in objects.C. I have a client I am setting up a VPN with, with Checkpoint on both ends, and we've been experiencing some timeout issues.  Checkpoint recommended increasing this value, but I am not clear on its function. Thank you,Elaine  

S/MIME Cryptographic Signature

Reply via email to