check point firewall wont start vpn tunnel

Ignoring msg to mark SA with dsID 72404992 dead because SA deleted The logging statements generated when the first piece of data after an hr is sent is: Teardown local-host Outside:171.28.18.50 duration 1:59:35

Sorry, I think I misunderstood Shane's comment, perhaps this info was in the error statement. Update: When I do show configuration my access lists and crypto maps are as follows (sorry if there's missing lines and funny names like 'bob', I'm a little out of my depth and found it a bit trial and errorish setting the VPN up!): access-list basic extended permit tcp any any eq 3389Īccess-list basic extended permit tcp any any eq sshĪccess-list basic extended permit tcp any any eq 255.255.255.240 10.199.2.0 255.255.255.0Īccess-list SiteAtoSiteB extended permit ip 78.129.136.64 255.255.255.240 10.199.2.0 255.255.255.0Īccess-list SiteAtoSiteB extended permit tcp 78.129.136.64 255.255.255.240 host 171.28.18.50 eq telnetĪccess-list bob standard permit host 171.28.18.50Ĭrypto map SiteToSiteVPN 10 match address SiteAtoSiteBĬrypto map SiteToSiteVPN 10 set peer 213.123.59.222Ĭrypto map SiteToSiteVPN 10 set transform-set SiteAToSiteBtransformĬrypto map SiteToSiteVPN 10 set security-association lifetime seconds 28800Ĭrypto map SiteToSiteVPN 10 set security-association lifetime kilobytes 4608000Ĭrypto map SiteToSiteVPN interface Outside Is there anything else I can check my side before I get in touch with them? I'd like to understand if the problem is config on ours (ASA5505) or the customers firewalls (Checkpoint). My timeout config is as follows: timeout conn 0:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 The 213.123.59.222 is their external ip for the checkpoint box, 78.129.136.64 is a machine on our local network sending the data, and 171.28.18.50 is a machine on their network I'm trying to send data to. Reason: crypto map policy not foundĬonnection terminated for peer 213.123.59.222. I've turned logging on and the following two lines look the most interesting: Session Disconnected. After an hour ASDM still thinks the VPN is connected and the connection duration continues to increment, however as soon as UI try to send data down it the tunnel gets torn down and recreated along with a rst packet sent from our firewall to the client machine on our network. I have an IPsec site-site VPN set up and working, however I'm having problems once the connection has been established for over an hour.

Check point firewall wont start vpn tunnel