This allows you to specify how long FW-1 will wait for all the pieces of
a fragmented packet to be reassembled before considering the packet fragments
lost. It will tie up buffers if you increase it, but if the interconnecting
network is experiencing long delays (ie. satellite,) then you will need
to allow for a little bit more time.
Regards,
CryptoTech
Elaine Lolos wrote:
Hello, I
was wondering if someone could tell me what the setting "fwfrag_timeout"
is used for in objects.C. I
have a client I am setting up a VPN with, with Checkpoint on both ends,
and we've been experiencing some timeout issues. Checkpoint recommended
increasing this value, but I am not clear on its function. Thank
you,Elaine
|