Cluster disconnect from the New Management after 5-10min

[tavi0906]

weekend we migrated the HA gateway from a old management server to a new management (locate at different location)

Old management = OLD IP address

New Management = NEW IP address (At different location)

We have re-established SIC (OK)

We have installed policy from the New Management to the HA Cluster (OK)

The Cluster disconnect from the New Management after 5-10min, logs still incoming from the Cluster.

Test SIC failed, unbale to push policy to the Cluster.

This are the error shown:

ckpSSL_fwasync_connected: no connection err -1

ckpSSL GetErrorString: err_code is (-1)

ckpSSL_fwasync_connected: err_msg: (ckpssl timeout)

We unload the policy from the Cluster and push policy, it back to normal again, but after 5-10, the connections break again.

We couldn't see any deny logs from the SmartConsole.

We change the anti-spoofing from blocking mode to detect mode then the connections between Management and Cluster are stable, but we couldn't see any log drop by anti-spoofing.

[Chris_Atkinson]

Please confirm the versions & JHF used for both new and old components and is each happily sync'd with NTP for their time?

[tavi0906]

version R80.40 take 180

[HeikoAnkenbrand]

You write:
cut>>>
weekend we migrated the HA gateway from a old management server to a new management (locate at different location)
<<<cut

Do you have completely implemented the following SK's?

How to change the IP Address of a Security Management Server? 
How to renew SIC after changing IP Address of Security Management Server  

[tavi0906]

We change the anti-spoofing from blocking mode to detect mode then the connections between Management and Cluster are stable, but we couldn't see any log drop by anti-spoofing