topic Re: Checkpoint IDC is getting frequently disconnected from ISE admin Node in General Topics

Checkpoint IDC is getting frequently disconnected from ISE admin Node

pradeep_paka1 — Fri, 21 May 2021 09:42:50 GMT

Hi All,

Need help..

Checkpoint IDC is getting frequently disconnected from ISE admin Node.

every time i need to restart service to make connection up again and after that it will get disconnected after 5 to 10 min.

Is there any solution for this?

I logs i can see below. "deny tcp (no connection) flags rst on interface "

PhoneBoy — Sat, 22 May 2021 02:32:12 GMT

Is there any firewall between the two?
Its possible you will need a TAC case to troubleshoot this.

pradeep_paka1 — Sat, 22 May 2021 13:07:40 GMT

Yes there is Cisco FW in between both and we see deny logs like "deny tcp (no connection) flags rst on interface".

All required ports are already allowed. Also IDC's are upgraded to 81.0018.0000 version.

PhoneBoy — Sat, 22 May 2021 15:54:21 GMT

That error suggests a possible asymmetric routing issue, which any stateful firewall is going to have issues with.
See: https://community.cisco.com/t5/network-security/deny-tcp-no-connection/td-p/2685271

pradeep_paka1 — Tue, 10 Aug 2021 14:30:22 GMT

This is solved after TAC gave hotfix.

Thanks..

MichaelGur — Mon, 13 Dec 2021 10:51:26 GMT

Can you tell me please, what hotfix solved this issue?