Checkpoint VPN

ggts

I am using pfsense 1.0.1 with IPsec passthru enabled in the web gui. I am using checkpoint VPN (VPN-1 secure client R 56 Build no. 619) on my lan clients to connect to remote servers. My connections go through fine, but after a period (typically 15 mins to 1 hour), the VPN client disconnects.

I doubt if this is a Checkpoint client/server problem because if I connect through an alternate (FortiGate) gateway in my network, my connections never drop.

Can someone please help me troubleshoot the problem?

Thanks in advance.

hoba

sounds like some idle timeout. Have a look at the firewallstates for these connections (best viewed at the shell/ssh as you see the timeouts there). Do you see them timing out? If yes try to add some firewallrules for this traffic with higher state timeouts.

ggts

Hoba, thanks for suggestions!

I've already "set optimization conservative" through the webgui. None
of the other connections are dropping.

Further, the VPN connection drops even when there is activity, so I
don't think it's an timeout issue. As you suggest, I will check out
the state table entries when the connection drops and report back.

If you have successfully used a Checkpoint VPN client through a
pfSense gateway, I'd be very happy if you can share your configuration
with me.

Screenshots of my config are posted here.

Thanks!!

hoba

I have not yet used a checkpoint client yet. :(

Oh, any chance you have a lifetime mismatch somewhere between the concentrator and the clients?