Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Dan_Djaker
Employee Alumnus
Employee Alumnus

FWACCEL blocking some sites from accessing internet

There was problem on a user end not able to get to the internet.
Recently updated to r77.30 when the problem started happening.
Started doing a debug through the firewall from the source and destination.
Made sure that the error was happening before we started the debug and I told the customer to turn off FWACCEL
to get the whole packet. Once we turned off the SecureXL the user end started working. We ran a tcpdump from the internal interface and external interface and a fw monitor while securexl was on and off.as

TCP dump ran with -nnei and no filter

Has anyone else had this problem?

3 Replies
PhoneBoy
Admin
Admin

What applications are you having issues specifically with?

What version of the Jumbo Hotfix are you on?

If disabling SecureXL solves something, you should get the TAC involved.

http://www.checkpoint.com/support-services/contact-support/index.html 

0 Kudos
Hugo_vd_Kooij
Advisor

Did you install/setup HTTPS inspection?

If that is the case you need to do a lot of steps after upgrading to R77.30.

<< We make miracles happen while you wait. The impossible jobs take just a wee bit longer. >>
0 Kudos
HeikoAnkenbrand
Champion Champion
Champion

SecureXL "fwaccel off" does not have to be disabled on R80.20 to run "fw monitor". This is good for performance, so "fw monitor" does not affect performance any more.

More see here: R80.x Performance Tuning and Debug Tips – fw monitor 

Regards

Heiko

➜ CCSM Elite, CCME, CCTE
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events