<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Script MT Bold";}
@font-face
{font-family:Corbel;
panose-1:2 11 5 3 2 2 4 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:1285691638;
mso-list-template-ids:-1978600238;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="2050" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>I have been testing the Shrew VPN on Windows Vista 64 bit
and the VPN works great for 15 Min then it stops passing the Traffic between
the Client and the Checkpoint Embedded VPN.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Any ideas as to why the VPN client will connect work for 15
min then stay connected to the tunnel but stop sending the packets encrypted every
15 min?<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Tunnel is connected:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><img width=307 height=306 id="Picture_x0020_1"
src="cid:image001.png@01CAD0CF.CBD5BAF0"><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><img width=307 height=306 id="Picture_x0020_2"
src="cid:image002.png@01CAD0CF.CBD5BAF0"><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Here is the Config:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><img width=315 height=377 id="Picture_x0020_3"
src="cid:image003.png@01CAD0CF.CBD5BAF0"><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><img width=315 height=377 id="Picture_x0020_4"
src="cid:image004.png@01CAD0CF.CBD5BAF0"><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><img width=315 height=377 id="Picture_x0020_5"
src="cid:image005.png@01CAD0CF.CBD5BAF0"><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><img width=315 height=377 id="Picture_x0020_6"
src="cid:image006.png@01CAD0CF.CBD5BAF0"><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><img width=315 height=377 id="Picture_x0020_7"
src="cid:image007.png@01CAD0CF.CBD5BAF0"><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><img width=315 height=377 id="Picture_x0020_8"
src="cid:image008.png@01CAD0CF.CBD5BAF0"><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><img width=315 height=377 id="Picture_x0020_9"
src="cid:image009.png@01CAD0CF.CBD5BAF0"><o:p></o:p></p>
<p class=MsoNormal><img width=315 height=377 id="Picture_x0020_10"
src="cid:image010.png@01CAD0CF.CBD5BAF0"><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><img width=315 height=377 id="Picture_x0020_11"
src="cid:image011.png@01CAD0CF.CBD5BAF0"><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>This is what Checkpoint thinks may be the issue:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal> <o:p></o:p></p>
<p class=MsoNormal><span style='color:black'>Symptoms <img width=1 height=3
id="Picture_x0020_12" src="cid:image016.png@01CAD0CF.F37047B0"
alt="https://sc1.checkpoint.com/sc/images/clear.gif"><img width=300 height=1
id="Picture_x0020_13" src="cid:image014.gif@01CAD0CF.CBD5BAF0"
alt="https://sc1.checkpoint.com/sc/images/orange_h_line_long.gif"><img width=1
height=3 id="Picture_x0020_14" src="cid:image016.png@01CAD0CF.F37047B0"
alt="https://sc1.checkpoint.com/sc/images/clear.gif"></span><span
style='font-size:10.0pt;font-family:"Arial","sans-serif";color:blue'><o:p></o:p></span></p>
<ul type=disc>
<li class=MsoNormal style='color:blue;mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;mso-list:l0 level1 lfo1'><span style='font-size:10.0pt;font-family:
"Arial","sans-serif"'>When Security Gateway uses DHCP server to provide
Office Mode IPs, Endpoint Connect client disconnects after 15 minutes. <o:p></o:p></span></li>
<li class=MsoNormal style='color:blue;mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;mso-list:l0 level1 lfo1'><span style='font-size:10.0pt;font-family:
"Arial","sans-serif"'>The following Endpoint Connect log message is
displayed: "remote access client IP address and port were
changed" <o:p></o:p></span></li>
<li class=MsoNormal style='color:blue;mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;mso-list:l0 level1 lfo1'><span style='font-size:10.0pt;font-family:
"Arial","sans-serif"'>Users may also see the Endpoint Connect log message:
"This machine's IP can only be used with Office Mode. Please try to
connect using Office Mode." <o:p></o:p></span></li>
</ul>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'><img width=1 height=10 id="Picture_x0020_15"
src="cid:image017.png@01CAD0CF.F37047B0"
alt="https://sc1.checkpoint.com/sc/images/clear.gif"></span><span
style='font-size:10.0pt;font-family:"Arial","sans-serif";color:blue'>Cause <img
width=1 height=3 id="Picture_x0020_16" src="cid:image016.png@01CAD0CF.F37047B0"
alt="https://sc1.checkpoint.com/sc/images/clear.gif"><img width=300 height=1
id="Picture_x0020_17" src="cid:image014.gif@01CAD0CF.CBD5BAF0"
alt="https://sc1.checkpoint.com/sc/images/orange_h_line_long.gif"><img width=1
height=3 id="Picture_x0020_18" src="cid:image016.png@01CAD0CF.F37047B0"
alt="https://sc1.checkpoint.com/sc/images/clear.gif">The 3rd Party DHCP server
IP lease time is set to 15 minutes. This time is less than the IKE Phase1
Renegotiation time period.<br>
<img width=1 height=10 id="Picture_x0020_19"
src="cid:image017.png@01CAD0CF.F37047B0"
alt="https://sc1.checkpoint.com/sc/images/clear.gif">Solution <img width=1
height=3 id="Picture_x0020_20" src="cid:image016.png@01CAD0CF.F37047B0"
alt="https://sc1.checkpoint.com/sc/images/clear.gif"><img width=300 height=1
id="Picture_x0020_21" src="cid:image014.gif@01CAD0CF.CBD5BAF0"
alt="https://sc1.checkpoint.com/sc/images/orange_h_line_long.gif"><img width=1
height=3 id="Picture_x0020_22" src="cid:image016.png@01CAD0CF.F37047B0"
alt="https://sc1.checkpoint.com/sc/images/clear.gif">Configure the 3rd Party
DHCP server IP lease time to be equivalent to the IKE Phase1 Renegotiation time
period. </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Here is what the IKE renegotiation is<o:p></o:p></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>Ike Renegotiation time is 1440 seconds / 24 min (page 644 of users
guide) </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'><o:p> </o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal> <o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-family:"Script MT Bold";color:navy'>Chris
Martin</span><span style='font-size:12.0pt;font-family:"Script MT Bold";
color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>SJU Technology Group</span><span style='font-family:"Times New Roman","serif";
color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>Technology Support Manager</span><span style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>Sparrow, Johnson & Ursillo, Inc.</span><span style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>1300 Division Rd, Suite 202</span><span style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><u><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>West Warwick RI,
02893 </span></u><span
style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:Wingdings;
color:navy'>(</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D'> </span><b><span style='font-size:10.0pt;font-family:"Corbel","sans-serif";
color:#1F497D'>Work: </span></b><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>(401) 521-4000 ext: 150</span><span style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:Wingdings;
color:navy'>(</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D'> </span><b><span style='font-size:10.0pt;font-family:"Corbel","sans-serif";
color:#1F497D'>Mobile: </span></b><span style='font-size:10.0pt;font-family:
"Arial","sans-serif";color:navy'>(508) 326-2673</span><span style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:Wingdings;
color:navy'>(</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D'> </span><b><span style='font-size:10.0pt;font-family:"Corbel","sans-serif";
color:#1F497D'>Fax</span></b><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>: (401) 274-5368</span><span style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:Wingdings;
color:navy'>*</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D'> </span><span style='font-size:10.0pt;font-family:
"Arial","sans-serif";color:navy'><a href="mailto:cmartin@sjutech.com"><span
style='color:blue'>cmartin@sjutech.com</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>Web:<a href="http://www.sju.com"><span style='color:blue'>www.sju.com</span></a><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>