alert in case of drops

[nlegastelois]

Hi All,

We are using a cluster of checkpoint FW and some time we have an issue and the FW start to drop some connections telling that the first packet is not a SYN and drop the packets, this issue is problematic because some kind of transfers are criticals and we would like to be alerted.

I tried to google this but I didn't find anything.

Is there any solution to receive an alerte if some trafic (I kwon the destination IP and port and the range of the source) generate many drops ?

Thanks for your help

Nico

[_Val_]

Which version?

[nlegastelois]

We are using version 80.10.

tks

[PhoneBoy]

In Global Properties > Stateful Inspection, you can turn off "Drop Out of State" to prevent these errors.
However, this is generally not recommended for security reasons.

For an alert, you'd have to create a custom alert in SmartEvent.
See: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_LoggingAndMonitoring_AdminGu...