Clavister Forums

Hello. There has been discussions on and off about making this presentable to the administrator in e.g. InControl. There is an RFE (request for enhancement) about adding this to InControl. "ICC-6708 - Add a Rule Usage Counter in InControl" This one is actually being investigated and if all goes well...

Hello. Good ideas / feedback. I have created a new RFE (request for enhancement) about the object creation and also added your comment in an existing RFE about the ability to move to/from a folder. COP-23734 - WebUI: Make it possible to select folder when creating objects from e.g. IP policy's COP-3...

Hello Thilo. "In my opinion an acive sa must be paired by an active ike cover - isnt'it?" Yes and no, this is actually allowed in IKEv1 but if you use IKEv2 this is forbidden. So in IKEv1 you could have an IKE timeout and the IPsec SA's still persists and everything is working fine. But when the IPs...

Hello. The Clavister forums is a system that has existed for many years now. It's style and format is quite old and we have been wanting to replace it with something else for quite some time. The replacement to the forums is called "Clavister Knowledge Base". The new URL to the KB space is : https:/...

Short update, due to various technical difficulties in the implementation the release has been delayed until at least Q4 2020. The new protocol is a rather big project and i kind of expected this delay. Hopefully there would be no further delays (knock on wood).

/Peter

This FAQ applies to: Any cOS Core or cOS Stream version with support for IPsec. Question: I have problems using IKEv1 / IKEv2 on MAC OSX, after a re-key the tunnel disconnects after a couple of minutes. On Windows it works fine. Answer: We have received feedback from customers that this seems to be...

Hello. I do not have any experience with this i'm afraid, but i know that you can lower the TTLMinimum to 1 for both normal TTL and Multicast under System->Advanced Settings->IP. When it comes to Multicast and Multiplex rules i would recommend having a look at the cOS Core admin guide for some advic...

The correction was pushed back a bit, it is now planned to be included in 2.32.01 (knock on wood).

/Peter

Hello. I believe this is a negotiation between the Firewall and the equipment the Firewall is connected to. So if you set 1000 MBit on the Firewall and the other side wants to use 100 Mbit, we will lower the speed to match it. It is also a bit dependent on the driver as some drivers/chipsets may rea...

This FAQ applies to: cOS Core version 12 and up (but can in many cases be applied to older versions as well). Question: Application XYZ in my network is interrupted whenever we make configuration changes to the Firewall, how can I avoid this? Answer: Short answer: It is unfortunately not possible t...