Checkpoint Problem

Hi,

Has any one come across a problem with Checkpoint, where by when a connection is made using a service (for example RDP) that the firewall blocks the return source port (even though Checkpoint should automatically open the source port).

Cheers

Pedals

I saw something similar once where the return connection wouldn't work because NAT had been half-implemented, providing a mapping from the outside to the inside but nothing back the other way. If it's not this, check your rules - perhaps you have another rule that is unexpectedly blocking the return part of the conversation

This problem has also appeared on internal communications between sites that have no NAT implemented.

An RDP connection to SITE A works fine, however and RDP connection to SITE B does not work.

The return source port gets blocked by the drop all rule.

Cheers

Pealds