topic Re: Connmonitor Problem in 1550 in Spark Firewall (SMB)

Connmonitor Problem in 1550

ma_gorkhali — Wed, 18 Sep 2024 01:47:02 GMT

The non-Active member in 1550 appliances displays a ConnMonitor issue. It does a probe to the DNS and the DNS servers are reachable and does reply back with a DNS request as well.

Anyone faced similar issue? Found an sk176108 as it asking for disabling the Probe itself which I do not want to do it.

Re: Connmonitor Problem in 1550

PhoneBoy — Wed, 18 Sep 2024 13:33:47 GMT

I assume the official answer to the issue is that SK.
And it looks like you were able to resolve the issue without permanently disabling the feature (“jiggling the handle” as it were): https://community.checkpoint.com/t5/Security-Gateways/Connmonitor-Problem/m-p/227036/highlight/true#M43654

Re: Connmonitor Problem in 1550

the_rock — Wed, 18 Sep 2024 15:53:33 GMT

I would agree with Phoneboy here. To me, seems like the answer is indeed whats indiocated in that sk.

Andy

https://support.checkpoint.com/results/sk/sk176108

Re: Connmonitor Problem in 1550

Lesley — Wed, 18 Sep 2024 17:16:44 GMT

As long the active member works as it should I would follow indeed the SK.

I also have seen known issues that a standby member cannot be accessed via tunnel to SSH or HTTPS. Looks like this is a bit similar.

Re: Connmonitor Problem in 1550

ma_gorkhali — Sun, 17 Nov 2024 14:09:52 GMT

Yes, I was able to solve it without disabling it.