- CheckMates
- :
- Products
- :
- Quantum
- :
- Security Gateways
- :
- FWACCEL blocking some sites from accessing interne...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
FWACCEL blocking some sites from accessing internet
There was problem on a user end not able to get to the internet.
Recently updated to r77.30 when the problem started happening.
Started doing a debug through the firewall from the source and destination.
Made sure that the error was happening before we started the debug and I told the customer to turn off FWACCEL
to get the whole packet. Once we turned off the SecureXL the user end started working. We ran a tcpdump from the internal interface and external interface and a fw monitor while securexl was on and off.as
TCP dump ran with -nnei and no filter
Has anyone else had this problem?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What applications are you having issues specifically with?
What version of the Jumbo Hotfix are you on?
If disabling SecureXL solves something, you should get the TAC involved.
http://www.checkpoint.com/support-services/contact-support/index.html
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Did you install/setup HTTPS inspection?
If that is the case you need to do a lot of steps after upgrading to R77.30.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
SecureXL "fwaccel off" does not have to be disabled on R80.20 to run "fw monitor". This is good for performance, so "fw monitor" does not affect performance any more.
More see here: R80.x Performance Tuning and Debug Tips – fw monitor
Regards
Heiko