Intermittency in P2 of an S2S VPN

[Matlu]

Hello everyone,

Are there any troubleshooting steps that can be used to determine whether an intermittency issue in phase 2 of a VPN against AWS is the responsibility of my Check Point?

I have a VPN that occasionally has problems with phase 2, where VoIP traffic travels.
The problem is with the SIP protocol, which occasionally becomes unstable, leading to user complaints about calls and the service in general.

I have detected drop logs related to INSPECTION SETTINGS, especially due to a problem with SIP traffic "retransmissions."

My question is, are these logs "sufficient" to determine that the problem is caused by Check Point?
Is it possible to have a list of preliminary steps to review, with an intermittent problem in phase 2 of a VPN?

Thank you

[the_rock]

 Just regular VPN debug, I would say.

[the_rock]

Debug I meant buddy:

-vpn debug trunc

-vpn debug ikeon

-generate some traffic

-vpn debug ikeoff

Check vpnd* and ike* files in $FWDIR/log dir

[Lesley]

You have to test if either the vpn is unstable or only the voice traffic so you can exclude stuff. Try to send different traffic then voice to the same destinations and check when voice does not work if other traffic does. Then you know where to search.

For debugging vpn I would use traffic logs. So check from and towards the remote servers but also remote peer ip. VPN debug is second option with ike viewer 

[the_rock]

That approach makes sense, lesley.