Professional Documents
Culture Documents
Details
Supported Versions
Edge firmware 8.2.x and UP
Supported Appliances
UTM-1 Edge X Series
UTM-1 Edge N Series
4. Delete or disable unnecessary NAT rules. Avoid using groups as source and destination in the remaining
active NAT rules.
5. Create a dedicated policy under different name with any->any accept rule and push it to the edge device.
If you see high traffic latency and VPN failures during high CPU load on your edge
device, which are caused by simultaneous pings passing through it, upgrade Edge
firmware to version: 8.2.50
If the CPU load on Edge device rises to 100% when file is transferred through Edge
device over PPTP VPN Tunnel, also upgrade to new the v8.2.50 firmware. (Fix to improve
the process of the GRE packets in both directions was integrated into firmware 8.2.50)
IMPORTANT NOTE: If ICMP traffic is present in customer’s environment, the ICMP improvements should be
enabled (by default they are disabled).
2. If Hardware Status shows NAND=1, install relevant firmware via TFTP. Refer to the SK article sk37668.
NOTE: When installing firmware via TFTP, both Primary flash memory and Backup flash memory get
erased.
3. If Hardware Status shows NAND=0, it indicates a hardware issue and we will RMA this unit.
If none of the above steps solved the issue you should contact Check Point support for
further troubleshooting with the following information:
1. Configuration from UTM-1 Edge (GUI - Setup - Tools - Export ; use Internet Explorer browser only)
2. Diagnostics from UTM-1 Edge (GUI - Setup - Tools - Diagnostics - SCROLL to the bottom - Save as
HTML)
3. Screenshot of the Status window from UTM-1 Edge (GUI - Reports - Status)
4. Event Log from UTM-1 Edge (GUI - Logs - Event Log - Save)
5. Security Log from UTM-1 Edge (GUI - Logs - Security Log - Save)
6. Packet Sniffer (GUI - Setup - Tools Capture network traffic > Sniffer)
7. CPinfo from the Management (SmartCenter)