I have one cluster of Juniper firewalls in an OSPF routing domain with Cisco routers. A few weeks ago we put an inline Sourcefire IPS between the firewalls and the routers, and lately we see OSPF neighbor marked down on the firewalls, because of hello timeouts.
Our timers are 2 seconds for hello and 6 seconds for dead interval. My question is, are these timers too low ? Has anybody experienced issues with OSPF with these kind of timers?