https://community.checkpoint.com/t5/Firewall-and-Security-Management/Issues-with-TCP-IP-connectivity-on-IPSEC-VPN/m-p/234452#M45444 <P>Good Day Community</P><P>We have Checkpoint star community IPSEC tunnel between Checkpoint appliance which is our center gateway and ASA as satellite gateway the VPN tunnel is up and TCP/IP connectivity works well for some time then at some point when we initiate the traffic from our VPN domain to the peer we have some outbound traffic issues we are not even able to do a telnet to the responder although the VPN tunnels is up only when we reset the connection on the VPN tunnel we start having TCP/IP connectivity.</P><P>In a nutshell when this occurs.</P><P>Inbound is working fine and outbound is not working fine.</P><P>What could be the issue ?</P><P>Regards</P> Tue, 03 Dec 2024 13:20:19 GMT ThabEugS 2024-12-03T13:20:19Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Issues-with-TCP-IP-connectivity-on-IPSEC-VPN/m-p/234452#M45444 <P>Good Day Community</P><P>We have Checkpoint star community IPSEC tunnel between Checkpoint appliance which is our center gateway and ASA as satellite gateway the VPN tunnel is up and TCP/IP connectivity works well for some time then at some point when we initiate the traffic from our VPN domain to the peer we have some outbound traffic issues we are not even able to do a telnet to the responder although the VPN tunnels is up only when we reset the connection on the VPN tunnel we start having TCP/IP connectivity.</P><P>In a nutshell when this occurs.</P><P>Inbound is working fine and outbound is not working fine.</P><P>What could be the issue ?</P><P>Regards</P> Tue, 03 Dec 2024 13:20:19 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Issues-with-TCP-IP-connectivity-on-IPSEC-VPN/m-p/234452#M45444 ThabEugS 2024-12-03T13:20:19Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Issues-with-TCP-IP-connectivity-on-IPSEC-VPN/m-p/234465#M45450 <P>I suspect there’s a mismatch in settings on both ends.<BR />Only way to know for sure is to debug:&nbsp;<A href="https://support.checkpoint.com/results/sk/sk180488" target="_blank">https://support.checkpoint.com/results/sk/sk180488</A><BR />You’ll need to debug on the Cisco side as well, most likely.</P> Tue, 03 Dec 2024 14:17:20 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Issues-with-TCP-IP-connectivity-on-IPSEC-VPN/m-p/234465#M45450 PhoneBoy 2024-12-03T14:17:20Z