FW1_scv_keep_alive Traffic Dropped

[VarunTP]

Few Check point VPN users are complaining that , in between there browsing traffic / share drive access is getting stopped and reconnecting while on Check point VPN . Checked the live logs and seen this error FW1_scv_keep_alive Traffic Dropped  .  Already the policy server is enabled as per this suggestion ( https://support.checkpoint.com/results/sk/sk92930) .

any thoughts or ideas what is this error message or whether this might be the reason for traffic drop ? VPN connection looks stable . - FW1_scv_keep_alive Traffic Dropped 

[the_rock]

Did you also do this part from the sk?

And

Create a NO NAT rule between Encryption domain and office mode IP address. (sk108839)

Best,

Andy

[VarunTP]

Thanks for the reply, could you help how to do that? 

[the_rock]

Here is super basic example in my lab.

Andy

original src is enc domain, irig dst is office mode and translated packet leave original, so no natting

 

[VarunTP]

Thanks let me check this option and revert you , Just a curiosity what is this issue actually? whether its blocking traffic due to this 

[the_rock]

Think of it this way...whenever you see TRANSLATED packet as original in both src and dst, that means no nat.

Best,

Andy