https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-proper-policy-enforcement-after-installing-jumbo-take-196-on/m-p/89590#M9010 <P>THX for the link, strange the search did not find anything related to this.</P><P>&nbsp;</P><P>BR<BR />Martin</P> Tue, 23 Jun 2020 18:40:00 GMT Martin_Peinsipp 2020-06-23T18:40:00Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-proper-policy-enforcement-after-installing-jumbo-take-196-on/m-p/89533#M9006 <P>Hi!</P> <P>We had a huge problem on a VSX-Cluster (R80.30, jumbo-take 155) after installing jumbo-take 196. After the reboot of the inactive cluster-node (cluster state was fine) we performed a manual failover ("vsx_util vsls") to this fw-node. Right after this, we had a overall taffic-outage because the policy was not enforced correctly. Most traffic was blocked based on the last clean-up-rule.</P> <P>We did not have enough time time analyze the problem (fw ctl zdebug, we only checked the size of the connection-table, which was very low at this time), so we uninstalled jumbo-take 196 again. After the reboot we had the same problem on both cluster-nodes.</P> <P>We had to push the policy manualy. Right after this, everything was working fine again.</P> <P>Befor this procedure the cluster was working fine and we did not have any issues with failover at all.</P> <P>We are already in contact with the TAC-Team.</P> <P>Do you have any ideas regarding this strange behaviour?</P> <P>&nbsp;</P> <P>Best regards</P> <P>&nbsp;</P> <P>Martin</P> Tue, 22 Jun 2021 21:30:39 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-proper-policy-enforcement-after-installing-jumbo-take-196-on/m-p/89533#M9006 Martin_Peinsipp 2021-06-22T21:30:39Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-proper-policy-enforcement-after-installing-jumbo-take-196-on/m-p/89535#M9007 <P>There are other posts already about this issue !</P> Tue, 23 Jun 2020 09:39:50 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-proper-policy-enforcement-after-installing-jumbo-take-196-on/m-p/89535#M9007 G_W_Albrecht 2020-06-23T09:39:50Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-proper-policy-enforcement-after-installing-jumbo-take-196-on/m-p/89539#M9008 <P>Hi!</P><P>Can you share a link, I did not find similar posts.</P><P>&nbsp;</P><P>Martin</P> Tue, 23 Jun 2020 10:13:11 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-proper-policy-enforcement-after-installing-jumbo-take-196-on/m-p/89539#M9008 Martin_Peinsipp 2020-06-23T10:13:11Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-proper-policy-enforcement-after-installing-jumbo-take-196-on/m-p/89561#M9009 <P><A href="https://community.checkpoint.com/t5/General-Topics/r80-30-take196-fw-unable-to-accept-new-connections-till-fwpol-is/m-p/89448" target="_blank">https://community.checkpoint.com/t5/General-Topics/r80-30-take196-fw-unable-to-accept-new-connections-till-fwpol-is/m-p/89448</A></P> Tue, 23 Jun 2020 13:25:47 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-proper-policy-enforcement-after-installing-jumbo-take-196-on/m-p/89561#M9009 Chris_Atkinson 2020-06-23T13:25:47Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-proper-policy-enforcement-after-installing-jumbo-take-196-on/m-p/89590#M9010 <P>THX for the link, strange the search did not find anything related to this.</P><P>&nbsp;</P><P>BR<BR />Martin</P> Tue, 23 Jun 2020 18:40:00 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-proper-policy-enforcement-after-installing-jumbo-take-196-on/m-p/89590#M9010 Martin_Peinsipp 2020-06-23T18:40:00Z