Check Point not send icmp reply after update R80.40

Luisnego — Wed, 16 Jun 2021 16:44:19 GMT

Hello Mattes,

After upgrading my SG to R80.40 and Jumbo Fix 94. I started having a problem, with ping. I have this issue:

I'm using monitor_icmp to monitoring the pool on f5 BIG IP, and my security gateway(Check Point) is the gateway of this network.

My external f5 big IP cannot ping the pool on f5 big IP internal or ping web server that CP is the gateway.

When I access SSH on Security Gateway I can see ICMP request using tcpdump, but I can't see ICMP reply, only after a send a ping from the security gateway.

When I access the security gateway and send an arp to check if has mac associates an IP, I can't see. After I send a command ping from the security gateway I can see the ARP.

Does anyone know why this happens?.

Every day I need to send a ping for all hosts that my f5 big IP can't find automatic

Re: Check Point not send icmp reply after update R80.40

Alex- — Wed, 16 Jun 2021 18:44:14 GMT

You're maybe running into this: https://community.checkpoint.com/t5/General-Topics/Strange-ICMP-issues-in-R80-40-with-hotfixes-greater-Take-94/m-p/120722#M22443

topic Re: Check Point not send icmp reply after update R80.40 in Firewall and Security Management

Check Point not send icmp reply after update R80.40

Re: Check Point not send icmp reply after update R80.40