Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Matlu
Advisor

Unstable traffic by NAT.

Hello,

I have a strange case.

I have an access rule, created to consume a domain.
The rule is working by FQDN (domain object).

The traffic is intermittent, for port 444 (Sometimes the rule works, and sometimes not).

When the rule does not work, it is because in the logs, you can see that the traffic at that time, does not NAT, and therefore can not reach the Internet.

The rule has that sense:

SRC: 192.168.70.0/0, 192.168.170.0/24, 192.168.130.0/24
DST: Domain Object -> ".sunat.gob.pe"
Services: 80, 8080, 444
Action: Accepted

The traffic for the other services like 80, and 8080, work fine, but the "instability" is when they want to consume that destination through port 444.

Sometimes it works, and sometimes it does not.

Any idea how to solve this intermittence?

I share 1 file, which contains the moment, when the rule works correctly, and the moment when the rule does not work.

Thanks for your comments.

0 Kudos
6 Replies
the_rock
Legend
Legend

Make sure all options for NAT in global properties are checked.

Andy

0 Kudos
Matlu
Advisor

Hello,

Do you mean this option?

RV2.png

Cheers . 🙂

0 Kudos
the_rock
Legend
Legend

si senor 🙂

0 Kudos
Matlu
Advisor

The "Global Properties" of the SmartConsole, is as the image you shared.

What makes me doubt is why the traffic at a certain moment stops doing NAT (this is why the traffic starts to match with the Cleanup Rule).

This happens at times.

It is very strange.

0 Kudos
the_rock
Legend
Legend

Few times I helped people with this sort of issue, we solved it by clearing nat table. I know its intrusive and has to be done off hours, but seemed to do the trick

Andy

https://support.checkpoint.com/results/sk/sk32224

0 Kudos
PhoneBoy
Admin
Admin

TAC is probably going to be necessary to get to the bottom of this.
Not sure why the port would matter here.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events