6.5R1, 6.5R2, 6.5R3.1 Network Connect sporadic disconnects.

[Moerkholt_]

Hi

As you are stating that pure SSL is working fine, but using ESP gives problems this issue could relate to UDP.

I have seen a similar case where ESP was used.

When NAT is involved ESP uses NAT-T(encapsulation in UDP-4500).

What i saw was a large amount of UDP packets with sourceport 4500 being dropped by the firewall in front of the SSL VPN device. The firewall saw those packet as an attempt to initiate a UDP-session from the SSL VPN device.

To solve this problem you can either choose to run pure SSL org try to adjust the timeout values for the UDP sessions through the firewall.

Regards

Hans

[DanSmart_]

I was using DHCP with NC, and I got duplicate IPs causing a similar problem. I switched to an IP pool to stop that. Not sure if that affects you, but it exhibits the same symptoms.