If you read my blog, you know that I do like Check Point firewalls. They are one of the top two, if you ask me (and Gartner). But, I have seen some flakiness that I don't like on occasion. This troubleshooting time was one of those times. I was on this problem for a while before I got any resolution. Check Point TAC didnt know the answer, and I just happened to come upon a fix for it. See below, the screenshot. What real sense does this make, when a packet is accepted and sent across the VPN, and the next packet is dropped. UDP_10001, for a Shoretel packet traversing a to a remote-access client. This kind of issue will drive you crazy.
I know I'm going to catch some flack for this, but sometimes Check Point is just down right flaky.
This is the retired Shane Killen personal blog, an IT technical blog about configs and topics related to the Network and Security Engineer working with Cisco, Brocade, Check Point, and Palo Alto and Sonicwall. I hope this blog serves you well. -- May The Lord bless you and keep you. May He shine His face upon you, and bring you peace.
No flack from me...like you said, this is the kind of thing that drives us network guys crazy. A firewall is the last place you want "flaky". So what is your other favorite firewall?
ReplyDeletePalo Alto, without all the issues check point gives me.
Delete