topic Implications of disabling GNAT in General Topics

Implications of disabling GNAT

AaronCP — Mon, 12 Jul 2021 16:28:05 GMT

Hey all,

First time poster - so if I've missed anything, please let me know.

We upgraded our gateway cluster from R80.30 to R80.40 take 118 a couple of weeks back. Users in our contact centre have started to report an issue where Agent A puts themselves into a "ready" state, it will change Agent B's "busy" state to ready, too. We have reported this to the vendor who has suggested this is could be a NAT-related issue. After some searching, I came across sk165153 which explains that the NATing for hide NAT configurations has changed from dynamic port allocation to GNAT.

For troubleshooting purposes, I want to disable GNAT as per sk165153 & sk26202 to see if the issue still occurs. Does anyone know of any implications to disabling GNAT?

Any advice would be greatly appreciated.

Thanks,

Aaron.

Re: Implications of disabling GNAT

PhoneBoy — Wed, 14 Jul 2021 16:48:10 GMT

If you have a lot of connections going to the same destination IP, you may experience HIDE NAT Failures.
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk156852
I would involve the TAC here as well.

Re: Implications of disabling GNAT

AaronCP — Wed, 14 Jul 2021 22:32:23 GMT

Hi @PhoneBoy,

Thanks for responding. I'll avoid disabling GNAT for now and engage TAC as you suggested.