Hi gurus, I have a Check Point NG FP3 Cluster XL on two Solaris 8 boxes (in Load Sharing). The cluster operates just fine as a firewall. Last week I wanted to implement a VPN tunnel between my office and a partner Check Point Firewall.
I'm having trouble with the SA tables synchronization or something like that. Once the tunnel is up, one of the member exchanges keys, and encrypts the first packets. If a session tries to go through the other member, then the packet is drop as "there is no valid SA", and the session is droped. Sucesive sessions that are supposed to go through the VPN tunnel are succesful as long as they are handled by the first module. So I got an intermittent VPN tunnel!, a 50% chance of going through. If I cpstop one of the cluster members, the VPN tunnel works great. What can be happening here?. Suggestions?. Thanks. L ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
