connectivity with the checkpoint endpoint security is lost

Scenario 3: If Visitor Mode port changed, Endpoint Security VPN cannot establish site Sk96124 - Path MTU Discovery (PMTUD) issues with Check Point Active Streaming (CPAS). It is a best practice in general to configure the same MTU on the external interface of the Security Gateway as the MTU of the next hop router. Note: There is no impact on the environment, as the traffic should be sent according to the next hop's MTU size, anyway. On the Security Gateway, lower the external interface's MTU size to the next hop's MTU size. As a result, the next hop drops the packets since they are sent with 'Don't Fragment' (DF) flag set. Next hop MTU is less than the MTU of the external interface of the Security Gateway.

When the Security Gateway sends packets that are larger than the next hop's MTU size, receive an ICMP 'Fragmentation Needed' message with the next hop's MTU size.

Security Gateway sends packets with 'Don't Fragment' (DF) flag set.

Security Gateway segments packets to 1500 bytes according to the MTU of its interface.

Endpoint Security VPN fails to connect to Security Gateway with ' Site is not responding' error.

Scenario 2: Endpoint Security VPN fails to connect to Security Gateway with 'Site is not responding' error

Install policy on the Security Gateway / Cluster object.

Put the Gateway Object back into any relevant VPN communities.

Click 'OK' to close the 'Properties' window.

In 'Certificate Nickname', type defaultCert ( all letters are small, except the 'C').

Select 'IPSec VPN' and under 'Repository of Certificates Available on the Gateway', click 'Add.'.

Select 'SmartDashboard > Security Gateway / Cluster object > Properties'.

Select 'IPSec VPN' and under 'Repository of Certificates Available on the Gateway', select the certificate called 'defaultCert'.

Select 'SmartDashboard > Security Gateway / Cluster object > Properties'.

Remove the Gateway Object from any VPN community it participates in.Select 'File > Database Revision Control > Create'.

Backup the database by using Database Revision Control.VPN certificate is expired / does not have the right properties / is corrupted.

Connectivity with the checkpoint endpoint security is lost