UDP packet loss after installing policy R81.20

[Jan_Kleinhans]

Hello everybody,

is somebody experiencing packet loss in udp streams when installing policy. 

We have this issue with MS Teams and also with voip traffic. 

When you are in a voip call and install policy, right after the policy installation is finished the voip call begins to loose packets so that you cannot hear each other anymore or only some words. 

We are using R81.20 JHF 76 or 89 and have this issue on 2 VSX Clusters (Checkpoint 19200 using UPPAK) . We have a case open for this issue since over a  month now. The debugging scenario didn't work as it is to heavy for the firewalls and we experience more outages.

Maybe somebody is experiencing the same ?

Jan

[Chris_Atkinson]

For context how is your connection persistence currently set?

Are you still suffering Errors / Drops / Mbuf / Misses in your "show interface eth1-0X stats" output, if you chart those how do they correlate to the policy installs?

[the_rock]

Hey Jan,

I read what @Chris_Atkinson responded with and exact same thought came to my mind. I had seen this before and it definitely could be related to setting below. I would set it to keep all connections.

Andy

 

• Keep all connections keeps all control and data connections open until the connections have ended. The newly installed policy will be enforced only for new connections.
• Keep Data Connections keeps all data connections open until the connections have ended. Control connections that are not allowed under the new policy will be terminated.

Rematch Connections means that all connections not allowed under the new policy will be terminated, unless the service has Keep connections open after policy has been installed is enabled in the Service Properties window.

[Timothy_Hall]

This thread sounds like it may be relevant to your issue:

https://community.checkpoint.com/t5/Security-Gateways/Message-seen-on-var-log-messages-quot-simi-reo...