<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Script MT Bold";}
@font-face
{font-family:Corbel;
panose-1:2 11 5 3 2 2 4 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>I did some more testing and this is the results I am
getting:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Started VPN connection: 10:12am<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>--------------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal>*****ICMP Ping Request started to Time out at 10:27am (15
MIn)<o:p></o:p></p>
<p class=MsoNormal>----------------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>VPN Status Shows:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Established - 1<o:p></o:p></p>
<p class=MsoNormal>Expired - 0<o:p></o:p></p>
<p class=MsoNormal>Failed - 0<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Status - Connected<o:p></o:p></p>
<p class=MsoNormal>Remote Host 209.136.27.198<o:p></o:p></p>
<p class=MsoNormal>Transport Used IKE ESP<o:p></o:p></p>
<p class=MsoNormal>IKE Frag - Disabled<o:p></o:p></p>
<p class=MsoNormal>Dead Peer Detection - Disabled<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>15 min of perfect Connection then the Packets start to time
out.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>-----------------------------------------------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal>*****At 11:06am the tunnel renegotiated and the ICMP "ping
“packets were being sent and received <o:p></o:p></p>
<p class=MsoNormal>*****again this is at 48min into the connection.<o:p></o:p></p>
<p class=MsoNormal>------------------------------------------------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>VPN Status Shows:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Established - 2<o:p></o:p></p>
<p class=MsoNormal>Expired - 1<o:p></o:p></p>
<p class=MsoNormal>Failed - 0<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Status - Connected<o:p></o:p></p>
<p class=MsoNormal>Remote Host 209.136.27.198<o:p></o:p></p>
<p class=MsoNormal>Transport Used IKE ESP<o:p></o:p></p>
<p class=MsoNormal>IKE Frag - Disabled<o:p></o:p></p>
<p class=MsoNormal>Dead Peer Detection - Disabled<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>15 min of perfect Connection then the Packets start to time
out.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>------------------------------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal>*****at 11:21am the tunnel is still connect but ICMP
"ping" packets dropped again <o:p></o:p></p>
<p class=MsoNormal>*****this is exactly (15 min) after it re-associated at
11:06am<o:p></o:p></p>
<p class=MsoNormal>----------------------------------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>--------------------------------------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal>*****at 11:54am the tunnel renegotiated and the ICMP "ping
“packets were being sent and<o:p></o:p></p>
<p class=MsoNormal>*****received again this is at (96 min) into the connection.<o:p></o:p></p>
<p class=MsoNormal>--------------------------------------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>VPN Status Shows:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Established - 3<o:p></o:p></p>
<p class=MsoNormal>Expired - 2<o:p></o:p></p>
<p class=MsoNormal>Failed - 0<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Status - Connected<o:p></o:p></p>
<p class=MsoNormal>Remote Host 209.136.27.198<o:p></o:p></p>
<p class=MsoNormal>Transport Used IKE ESP<o:p></o:p></p>
<p class=MsoNormal>IKE Frag - Disabled<o:p></o:p></p>
<p class=MsoNormal>Dead Peer Detection - Disabled<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>15 min of perfect Connection then the Packets start to time
out. Then Cycle starts again<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>-------------------------------------------------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>So the issue seems to have something to due with a timing
issue in the renegotiation of the IKE connection and DHCP renew?<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>according to Checkpoint docs the VPN client is suppose to renegotiate
every 24 min and the DHCP lease should be renewed at this time also.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>If we can figure out this issue we are more than willing to
donate to the development… Client works great during time of good connectivity…
but losing the connection 15 min in and then having to either reconnect or
wait 33 min for the connection to reconnect properly is a complete show
stopper..<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>If this can get fixed I have 100 of users and a few support
groups looking for a solution to the dreaded Checkpoint lack of support for 64
bit systems and the embedded VPN in the edge devices.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-family:"Script MT Bold";color:navy'>Chris
Martin</span><span style='font-size:12.0pt;font-family:"Script MT Bold";
color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>SJU Technology Group</span><span style='font-family:"Times New Roman","serif";
color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>Technology Support Manager</span><span style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>Sparrow, Johnson & Ursillo, Inc.</span><span style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>1300 Division Rd, Suite 202</span><span style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><u><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>West Warwick RI,
02893 </span></u><span
style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:Wingdings;
color:navy'>(</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D'> </span><b><span style='font-size:10.0pt;font-family:"Corbel","sans-serif";
color:#1F497D'>Work: </span></b><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>(401) 521-4000 ext: 150</span><span style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:Wingdings;
color:navy'>(</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D'> </span><b><span style='font-size:10.0pt;font-family:"Corbel","sans-serif";
color:#1F497D'>Mobile: </span></b><span style='font-size:10.0pt;font-family:
"Arial","sans-serif";color:navy'>(508) 326-2673</span><span style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:Wingdings;
color:navy'>(</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D'> </span><b><span style='font-size:10.0pt;font-family:"Corbel","sans-serif";
color:#1F497D'>Fax</span></b><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>: (401) 274-5368</span><span style='color:navy'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:Wingdings;
color:navy'>*</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D'> </span><span style='font-size:10.0pt;font-family:
"Arial","sans-serif";color:navy'><a href="mailto:cmartin@sjutech.com"><span
style='color:blue'>cmartin@sjutech.com</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>Web:<a href="http://www.sju.com"><span style='color:blue'>www.sju.com</span></a><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>