Have ever faced a connectivity issue(out of state packets) after exaclty 1 hour from install policy?

[KostasGR]

Hello community 

Have you ever faced a connectivity issue (out of state packets) after exaclty 1 hour from install policy?

BR,

Kostas

[the_rock]

I never have, but sounds like it might have something to do with either setting under gateway properties for connection persistence OR possible session timeouts in global properties.

Andy

[CheckPointerXL]

Version and JHF ?

[Timothy_Hall]

Code level and system type?

Only affects traffic in a site-to-site IPSec tunnel?

VPN Uptime

IPSec VPN Tunnel stops passing traffic after exactly 1 hour

Affecting only Remote Access VPN connections?

sk160213: TCP sessions freeze/disconnect after one hour

VSX?

sk179446: Connections are dropped 60 minutes after the Standby VS goes to Down state

SP/Maestro?

sk172887: TCP connection drops 60 min after a failover in the Security Group on Scalable Chassis / M...

Beyond that use fw ctl conntab to show the idle timeout (TCP Session timeout) for connections counting down, in the format X/3600.  Enabling TCP state logging may also be helpful: sk101221: TCP state logging

[KostasGR]

Hello @Timothy_Hall @CheckPointerXL @the_rock 

The version is R81.10 Take 38 VSX.

I believe we are matching exactly sk179446: Connections are dropped 60 minutes after the Standby VS goes to Down state

BR,

Kostas

[the_rock]

Thats very good reference. I would still verify with TAC though, just to be sure.

Best regards,

Andy