topic FW1_scv_keep_alive Traffic Dropped in SASE and Remote Access

FW1_scv_keep_alive Traffic Dropped

VarunTP — Mon, 12 Feb 2024 11:50:29 GMT

Few Check point VPN users are complaining that , in between there browsing traffic / share drive access is getting stopped and reconnecting while on Check point VPN . Checked the live logs and seen this error FW1_scv_keep_alive Traffic Dropped . Already the policy server is enabled as per this suggestion ( https://support.checkpoint.com/results/sk/sk92930) .

any thoughts or ideas what is this error message or whether this might be the reason for traffic drop ? VPN connection looks stable . - FW1_scv_keep_alive Traffic Dropped

Re: FW1_scv_keep_alive Traffic Dropped

the_rock — Mon, 12 Feb 2024 12:28:37 GMT

Did you also do this part from the sk?

And

Create a NO NAT rule between Encryption domain and office mode IP address. (sk108839)

Best,

Andy

Re: FW1_scv_keep_alive Traffic Dropped

VarunTP — Mon, 12 Feb 2024 12:45:07 GMT

Thanks for the reply, could you help how to do that?

Re: FW1_scv_keep_alive Traffic Dropped

the_rock — Mon, 12 Feb 2024 13:37:06 GMT

Here is super basic example in my lab.

Andy

original src is enc domain, irig dst is office mode and translated packet leave original, so no natting

Re: FW1_scv_keep_alive Traffic Dropped

VarunTP — Mon, 12 Feb 2024 13:47:14 GMT

Thanks let me check this option and revert you , Just a curiosity what is this issue actually? whether its blocking traffic due to this

Re: FW1_scv_keep_alive Traffic Dropped

the_rock — Mon, 12 Feb 2024 13:53:00 GMT

Think of it this way...whenever you see TRANSLATED packet as original in both src and dst, that means no nat.

Best,

Andy