Hi guys, We have a Check Point FP3 (standalone) running un Solaris 2.8, we did a migration to Check Point R55 on SPLAT using upgrade_import/upgrade_export utility. Everything looked great: we could log on to the SmartCenter, we installed policies, rules and VPNs looked like were working well. However we have two different ISP links, one for the internet traffic and the other to make a VPN against other Check Point 4.1 gateway. I was curious about which ISP was working with the VPN, so I ran a tcpdump on the "VPN interface" finding out that there was a little amount of traffic going out through that interface. In fact, ISP stats shows a decrease in the traffic flow. So, I made another tcpdump on the other interface, finding out that there was encrypted requests from the other VPN gateway. I disconnected the "so called" VPN link and some VPN traffic remained active(HTTP traffic). This happens regardless of static routes sending both remote encryption domain and remote gateway through the "VPN link". I suspect that the other Check Point 4.1 VPN gateway is pointing to the wrong IP address (we don't manage it), however when I connect the old firewall everything works correctly... I mean when I disconnect the "VPN link", all VPN traffic goes down. In conclusion, I need your help, does somebody had a problem like this? Do you think that the 4.1 gateway is pointing to the wrong IP address too? Could it be a difference in the handling of VPNs, routes or something like that between FP3 and R55 or Solaris and SPLAT?
I'm really puzzled, hope you can help me, :) Thanks, _______________________________ Jos� Mar�a Gabald�n Network Security Engineer email: [EMAIL PROTECTED] www.cybertech.com.ve ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
