IKE Crashes and RA VPN issues on R81.20 Take 98

[Alex_Lewis]

We recently installed Take 98 on R81.20 and started having wide-spread problems with Remote Access VPN connecting. We also received a report from TAC Pro Support that an IKE crash was reported on our gateways, but unfortunately no additional details of the crash were provided. We did not see any signs that site-to-site VPN was affected, just RA VPN. After troubleshooting for a couple days, TAC informed us of a known bug and provided a patch that has fixed the issue. If you run into this issue after upgrading to T98, don't hesitate to reach out to TAC and ask about a patch for IKE crash.

[the_rock]

Interesting...I had not had that problem myself. Just curious, what was the actual fix?

Andy

[Alex_Lewis]

I guess the IKE crashing is not an issue for everyone. I had asked TAC about installing on other gateways when we upgrade them. There answer was "Unless we see the same IKED crashes or frequent significant RA VPN/S2S VPN tunnel disconnections, we don't recommend to install this portfix on all the gateways on T98."

[Henrik_Noerr1]

I wonder if Check Point knows what Important Notes are for?

Let me help; https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Important-Notes.htm?tocpath=_____2

Some VPN issue was also reported in some of the latest threads as well, without anything in the important notes.

The extreme load on MLMs also was not present for a long time, I'm unsure yet if it has been added, as dates are not present when a new entry is added.

And yeah - don't upgrade to newest jumbos but let others take the hit 🙂

@the_rock You continuously for each jumbo advertise that this is now faster and more stable. Reporting it is now in your lab and stable, updating for 1hour 24hour and 48hours progress to stress how stable it is.

I invite you to not post these updates. I see them at best as ignorance, and at worst as false advertising in a let's be honest a non existing lab or a lab consisting of a VM with zero usage.

Thanks

Henrik

[the_rock]

I suppose everyone's experience is different. I can only speak for myself 🙂

Andy