About Richard_M

Hi @akuzhuppilly  Thanks for your reply.  According to the last step (I) in the 7th step in the guide it says  "Verify that the   Connected status   displays as connected (a green light). "  At the firewall here it says "No" under Connected. How do I exactly make become connected? For all the other fw`s it says "Yes" under connected. Regarding that the log indicates connectivity problems. Do you fix that at the firewall or somewhere else?  I see in the same document, step 8 it says something about the user id-agent. Where do you "launch the User-ID agent"  ... View more

Hi @TomYoung  I don`t see the that specific traffic in the logs, but when I search for the src and dst ip`s one by one (with other ip addresses in the other end) in the traffic log, they both use the same interface.  //Richard ... View more

Hi @TomYoung  It seem that Ping is the only one check for in the Interface Management Profile applied to that interface. But since the ssh traffic is not droped or received when running the packet capture there should be an issue at the source side?  I have to look more into if ssh should be allowed at that Interface Management Profile.  //Richard ... View more

Hi @ozheng  Thank you for your help. I read that it was needed to turn the packet capture off, so that is done 🙂   ... View more

Hi @ozheng  Didn't receive any files when I ran the packet capture while ssh was in being run. Have asked the person to look at their config again.  //Richard ... View more

Hi @ozheng  The logging is already enabled with "Log at Session End". In the traffic logs I can't see any log of either ssh or ping, even though it is reported that the ping is going through. Thank you the link! //Richard  ... View more

Hi @PavelK  Thank you for this information. I see your way also provided much more information than about many other things that probably will come in handy later. And for the guide to replace the firewall. I will look into that. It was a lot fewer steps than the guide I looked at. ... View more

Hi @Alin.Scarlat  Thanks for advice. Found what I was looking for. This was a pretty way to see and find much more also 🙂   ... View more

Hi @kat3xx  Thank you for your answer. I checked the jumboframe and it was already enabled.  I got some more info. There are two situations. One where it works and one where it don`t work: The source is the same but the destionation address is different and is in two differente DC. There exists opening for both secenarios. Situation 1: The src and dst address is in the same DC and the traffic only need to go through one zone and one fw. In this case, everything works as intended. Situation 2: The src and dst address is in two different DC`s and the traffic goes through three zones. In this case the fragmentet traffic is not received at the dst. From what I can see from the traffic log, the traffic is allowed in both situations, but is there someway to see if fragmented traffic is going through in some way or is it enough to see that the traffic is allowed in the traffic log?  They also did some ping where should have issued a ping with up to 1472 packets (if you can say it like that) and it went through, but if they issued a ping from 1473 and above it didn`t work. Does this give any sense?  Is there something else I should check? I am not sure if this is a fw issue or not. ... View more

Hi @PavelK  I looked at the links you attached. The closest symptom I found related to my issues is the "No valid device certification was found" from the KB link The customer I work for/with don`t have an Customer Support Portal. Don't believe they ever had one because of some restriction(?) I tried to generate a certificate but doesn't seem to help.  I followed the steps in the other links to install a certificate, but as mentioned above it stops when it comes to g enerate the One Time Password (OTP) for managed firewalls through Customer Support Portal.  Is it possible to download the different software versions in another way?  ... View more