Checkpoint IDC is getting frequently disconnected from ISE admin Node

[pradeep_paka1]

Hi All,

Need help..

Checkpoint IDC is getting frequently disconnected from ISE admin Node.

every time i need to restart service to make connection up again and after that it will get disconnected after 5 to 10 min.

Is there any solution for this?

I logs i can see below. "deny tcp (no connection) flags rst on interface "

[PhoneBoy]

Is there any firewall between the two?
Its possible you will need a TAC case to troubleshoot this.

[pradeep_paka1]

Yes there is Cisco FW in between both and we see deny logs like "deny tcp (no connection) flags rst on interface".

All required ports are already allowed. Also IDC's are upgraded to 81.0018.0000 version.

[PhoneBoy]

That error suggests a possible asymmetric routing issue, which any stateful firewall is going to have issues with.
See: https://community.cisco.com/t5/network-security/deny-tcp-no-connection/td-p/2685271

[pradeep_paka1]

This is solved after TAC gave hotfix.

Thanks..

[MichaelGur]

Can you tell me please, what hotfix solved this issue?