cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question
Employee
Employee

FWACCEL blocking some sites from accessing internet

There was problem on a user end not able to get to the internet.
Recently updated to r77.30 when the problem started happening.
Started doing a debug through the firewall from the source and destination.
Made sure that the error was happening before we started the debug and I told the customer to turn off FWACCEL
to get the whole packet. Once we turned off the SecureXL the user end started working. We ran a tcpdump from the internal interface and external interface and a fw monitor while securexl was on and off.as

TCP dump ran with -nnei and no filter

Has anyone else had this problem?

Tags (3)
3 Replies
Admin
Admin

Re: FWACCEL blocking some sites from accessing internet

What applications are you having issues specifically with?

What version of the Jumbo Hotfix are you on?

If disabling SecureXL solves something, you should get the TAC involved.

http://www.checkpoint.com/support-services/contact-support/index.html 

0 Kudos

Re: FWACCEL blocking some sites from accessing internet

Did you install/setup HTTPS inspection?

If that is the case you need to do a lot of steps after upgrading to R77.30.

0 Kudos

Re: FWACCEL blocking some sites from accessing internet

SecureXL "fwaccel off" does not have to be disabled on R80.20 to run "fw monitor". This is good for performance, so "fw monitor" does not affect performance any more.

More see here: R80.x Performance Tuning and Debug Tips – fw monitor 

Regards

Heiko

0 Kudos