Sequence Number Verifier

Check Point community forum

May 20, 2012, 09:57:09 PM

Welcome, Guest. Please login or register.
Did you miss your activation email?

News:

Home

Forum

Help

User

Welcome, Guest. Please login or register.
Did you miss your activation email?
May 20, 2012, 09:57:09 PM

Articles

[Nokia] User ends up in clish immediately after login by juve
Put your company logo on Integrity interface by juve
ftp : Active command received while working in Passive mode by juve
How to enable the VPN accelerator on Nokia by juve
Routes not surviving a reboot on SecurePlatform by juve

Check Point community forum > Forum > Perimeter security > SmartDefense > Sequence Number Verifier

Pages: [1]

« previous next »

Author

Topic: Sequence Number Verifier (Read 934 times)

CPbier

Newbie

Posts: 23

Sequence Number Verifier

« on: May 21, 2008, 02:36:11 PM »

In the current releases the Sequence Number Verifier seems to be a part of Smartdefense. I want to debug this and see more detail. I found the command "fw ctl debug -m fw packval" to do so but this is a production firewall and I would like to know if anyone has tried this before. Heavy spikes in performance etc... ? Should I add more options or filter further?

The reason why I need to debug: SIC connections towards firewall A go through firewall B. Firewall B is dropping those connections because the sequence numbers are not correct. Everything is NGX.

Z.


	Logged

juve

Administrator
Jr. Member

Posts: 92

Re: Sequence Number Verifier

« Reply #1 on: May 22, 2008, 09:32:34 AM »

the command should work but debugging will increase the load on the CPU. I didn't see much problems yet on disk based platforms, but watch out on flash based firewalls if they're Nokia's.