FWACCEL blocking some sites from accessing internet

[Dan_Djaker]

There was problem on a user end not able to get to the internet.
Recently updated to r77.30 when the problem started happening.
Started doing a debug through the firewall from the source and destination.
Made sure that the error was happening before we started the debug and I told the customer to turn off FWACCEL
to get the whole packet. Once we turned off the SecureXL the user end started working. We ran a tcpdump from the internal interface and external interface and a fw monitor while securexl was on and off.as

TCP dump ran with -nnei and no filter

Has anyone else had this problem?

[PhoneBoy]

What applications are you having issues specifically with?

What version of the Jumbo Hotfix are you on?

If disabling SecureXL solves something, you should get the TAC involved.

http://www.checkpoint.com/support-services/contact-support/index.html 

[Hugo_vd_Kooij]

Did you install/setup HTTPS inspection?

If that is the case you need to do a lot of steps after upgrading to R77.30.

[HeikoAnkenbrand]

SecureXL "fwaccel off" does not have to be disabled on R80.20 to run "fw monitor". This is good for performance, so "fw monitor" does not affect performance any more.

More see here: R80.x Performance Tuning and Debug Tips – fw monitor 

Regards

Heiko