topic Re: FWACCEL blocking some sites from accessing internet in Firewall and Security Management

FWACCEL blocking some sites from accessing internet

Dan_Djaker — Fri, 06 Apr 2018 00:55:57 GMT

There was problem on a user end not able to get to the internet.
Recently updated to r77.30 when the problem started happening.
Started doing a debug through the firewall from the source and destination.
Made sure that the error was happening before we started the debug and I told the customer to turn off FWACCEL
to get the whole packet. Once we turned off the SecureXL the user end started working. We ran a tcpdump from the internal interface and external interface and a fw monitor while securexl was on and off.as

TCP dump ran with -nnei and no filter

Has anyone else had this problem?

Re: FWACCEL blocking some sites from accessing internet

PhoneBoy — Sat, 07 Apr 2018 05:00:34 GMT

What applications are you having issues specifically with?

What version of the Jumbo Hotfix are you on?

If disabling SecureXL solves something, you should get the TAC involved.

http://www.checkpoint.com/support-services/contact-support/index.html

Re: FWACCEL blocking some sites from accessing internet

Hugo_vd_Kooij — Mon, 16 Apr 2018 11:20:53 GMT

Did you install/setup HTTPS inspection?

If that is the case you need to do a lot of steps after upgrading to R77.30.

Re: FWACCEL blocking some sites from accessing internet

HeikoAnkenbrand — Sun, 18 Nov 2018 19:54:46 GMT

SecureXL "fwaccel off" does not have to be disabled on R80.20 to run "fw monitor". This is good for performance, so "fw monitor" does not affect performance any more.

More see here: R80.x Performance Tuning and Debug Tips – fw monitor

Regards

Heiko