topic Re: Have ever faced a connectivity issue(out of state packets) after exaclty 1 hour from install pol in Firewall and Security Management

Have ever faced a connectivity issue(out of state packets) after exaclty 1 hour from install policy?

KostasGR — Fri, 24 Nov 2023 19:58:45 GMT

Hello community

Have you ever faced a connectivity issue (out of state packets) after exaclty 1 hour from install policy?

BR,

Kostas

Re: Have ever faced a connectivity issue(out of state packets) after exaclty 1 hour from install pol

the_rock — Fri, 24 Nov 2023 22:49:48 GMT

I never have, but sounds like it might have something to do with either setting under gateway properties for connection persistence OR possible session timeouts in global properties.

Andy

Re: Have ever faced a connectivity issue(out of state packets) after exaclty 1 hour from install pol

CheckPointerXL — Fri, 01 Dec 2023 23:37:27 GMT

Version and JHF ?

Re: Have ever faced a connectivity issue(out of state packets) after exaclty 1 hour from install pol

Timothy_Hall — Mon, 04 Dec 2023 13:48:57 GMT

Code level and system type?

Only affects traffic in a site-to-site IPSec tunnel?

VPN Uptime

IPSec VPN Tunnel stops passing traffic after exactly 1 hour

Affecting only Remote Access VPN connections?

sk160213: TCP sessions freeze/disconnect after one hour

VSX?

sk179446: Connections are dropped 60 minutes after the Standby VS goes to Down state

SP/Maestro?

sk172887: TCP connection drops 60 min after a failover in the Security Group on Scalable Chassis / Maestro

Beyond that use fw ctl conntab to show the idle timeout (TCP Session timeout) for connections counting down, in the format X/3600. Enabling TCP state logging may also be helpful: sk101221: TCP state logging

Re: Have ever faced a connectivity issue(out of state packets) after exaclty 1 hour from install pol

KostasGR — Mon, 04 Dec 2023 11:27:29 GMT

Hello @Timothy_Hall @CheckPointerXL @the_rock

The version is R81.10 Take 38 VSX.

I believe we are matching exactly sk179446: Connections are dropped 60 minutes after the Standby VS goes to Down state

BR,

Kostas

Re: Have ever faced a connectivity issue(out of state packets) after exaclty 1 hour from install pol

the_rock — Mon, 04 Dec 2023 12:44:12 GMT

Thats very good reference. I would still verify with TAC though, just to be sure.

Best regards,

Andy