First the SH will use their inpath IP to establish optimization between them.
I use them through forcepoint firewalls / VPN without issue.
Do you setup full transparancy for optimisation?
Do you see something blocked in your forcepoint logs? Maybe your FW block probing packets.
If it's the case you can change your ACL or use GRE encapsulation on your SH.
My best regards
Thanks for the help!
All my inpath rules have been set to "Correct Addressing" by default (for lack of understanding!). I have just tested setting the relevant inpath rules on both sides to be Full Transparency, retested the connections, but the same! (Failed Terminated on source side due to No SH on Path, SYN on WAN on the Destination side).
I'm not seeing any blocks in the FW logs, but no probing packets allowed either. Maybe I need to explicitly allow them in case they are obscured by hidden rules.
- Test Physical Connectivity
At Steelhead CLI : ping -I <source in-path IP address> <destination in-path IP address>
If it does not work then check the default gateways in the Steelheads for the in-path interfaces
- Test port 7800 connectivity between Steelheads
At Steelhead CLI: telnet -b <source in-path IP address> <destination in-path IP address> 7800
- If you get ‘connected’ (blank screen) the connection over port 7800 is working fine.
- If you do not get ‘connected’ then traffic over port 7800 is probably blocked somewhere. (Firewall or router access rules)
- VLAN on InPath interfaces : VLAN Tag ID is configured on each InPath interface
Sorry for the delay in replying.
My test involced FTP from the 10.170.4.0 network to the 10.170.5.0 network.
The main fle transfer IS getting optimised
It appears to be the FTP reply/control connection that it still getting "no steelhead on path" on the sending steelhead, then SYN on WAN on the receiving steelhead.
I will try and screen capture this, but they close off quite quickly - the optimised on in particlular!
In fact i have replicated the failing connection just by starting the FTP connection without data transfer.