Solved

Exchange 2007 and Checkpoint R76

Posted on 2013-06-01
4
493 Views
Last Modified: 2013-10-01
We have recently migrated from Checkpoint R71.20 on a UTM1 1050 to Checkpoint R75.40 on a Checkpoint 4407.  Everything has tested successfully except for the email traffic on this.

The Exchanger server hosts all the services, and works fine on the webmail client - so the rule base appears fine and NAT appears to be working to the server.

However, with the new firewall in (using exactly same rules as the old firewall) running the most recent version of Checkpoint, the Exchange box cannot do DNS, send or receive emails or browse the web.

I have explicity given the server a rule on the firewall to allow it any traffic in and out to test, but this still does not work for email/browsing/dns.

I have turned off the IPS module so it is running truly the same as the previous firewall.

When I swap back to the old firewall, this works as normal.

Any ideas?
0
Comment
Question by:CaringIT
  • 3
4 Comments
 
LVL 22

Expert Comment

by:Matt V
ID: 39216431
What does the smartview tracker show as far as traffic being allowed or blocked from Exchange?
0
 

Author Comment

by:CaringIT
ID: 39218314
From what I can see, all data flows out of the firewall ok, but nothing is coming back.  We have also now upgraded to R76 as well as part of this process.

I turned off NAT for the exchange server, and this can browse the internet, make DNS requests, etc as normal.  It cannot received email as this is being sent to it's external IP address which is NATed to it.

When I turn the NAT back on, browsing, DNS, etc stops.  It cannot received emails, but you can access the OWA service running on the box as normal.

So - it appears to be the NAT causing the issue.  I have compared the R71.20 box and R76 and I can see now differences in the rules or the NAT table to cause this.
0
 

Accepted Solution

by:
CaringIT earned 0 total points
ID: 39524577
We have since found there was a routing error on the firewall config, even though it took Checkpoint a good couple of weeks to find it with us.
0
 

Author Closing Comment

by:CaringIT
ID: 39535868
In depth investigations from Checkpoint to resolve
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now