VPN 3000 problem

[joseramada]

I have 2 CVPN 3000 at my institution. They have both software version 4.7.2.L-k9. Thay also have WebVPN running.

Lately something strange has been happening. One VPN loses connection (ping keepalives stop working) and no one can connect. When this happens I change the dns A record of the vpn service to the 2nd CVPN and, after a while, that 2nd CVPN stops responding. Can this be an attack? What can I search for in the logfile? The logfile cannot handle more than 15, 20 minutes.

Thanks in advance.

[joseramada]

I have captured some traffic directed to the SSL port. There alots of TCP retransmission packets (ack dup).

Disabling SSL service I have the CVPN running for a day now.. it seems the problems have stopped. Of course nw I don?t have WebVPN service.

Any suggestions? Has anyone experienced such a problem?

Tx