opensubscriber
   Find in this group all groups
 
Unknown more information…

f : fw-1-mailinglist@amadeus.us.checkpoint.com 24 February 2012 • 8:41PM -0500

Re: [FW-1] Connections dropping when pushing policy
by Independent IT Consultant

REPLY TO AUTHOR
 
REPLY TO GROUP




Prior to R70, CoreXL wasn't part of maintrain code, and was only introduced
as a special release after R65.  This is the component that makes use of
multiple CPUs.

On Nokia, you also needed IPSO version 607 or later to use this feature.

On Thu, Feb 23, 2012 at 8:22 PM, Ray <sixsigma44@hotm...> wrote:

> I'm confused. I thought the Nokia on R65 was the firewall. The firewalls
> are licensed by CPU but the SmartCenters are not.
>
> I'm pretty sure that Check Point did not enforce the CPU limit until very
> recent versions. But maybe not. I do get confused easily any more,
> especially on Check Point licensing. :-)
>
> Ray
>
> > Date: Thu, 23 Feb 2012 12:18:33 +0530
> > From: mohamedn@FSS....
> > Subject: Re: [FW-1] Connections dropping when pushing policy
> > To: FW-1-MAILINGLIST@AMAD...
> >
> > I am not getting this NTP error message, anyway have enabled "Keep all
> > connections" as per Tom's advice. We are looking for a good time to push
> > and test. Thanks for all people replied, will get back with the results.
> >
> > Ray,
> >
> > Why we used R75.20 was the Nokia was told to have 4 processors and it
> > was using only 1 at a time. We were advised to use R75.20 to solve this.
> >
> >
> > Regards
> > Mohamed.n
> >
> >
> >
> >
> >                                                      2380
> >                                                      mohamedn@fss....
> > +91 95001 29207
> >
> > -----Original Message-----
> > From: Mailing list for discussion of Firewall-1
> > [mailto:FW-1-MAILINGLIST@AMAD...] On Behalf Of Matthew
> > Rossiter
> > Sent: Wednesday, February 22, 2012 12:39 AM
> > To: FW-1-MAILINGLIST@AMAD...
> > Subject: Re: [FW-1] Connections dropping when pushing policy
> >
> > I had the same problem with a pair of Nokia's in a vrrp configuration
> > and a large policy.  Every time I pushed policy connections would get
> > dropped.   In the Nokia system logs I would see a lot of ' xntpd:
> > restarting' messages.
> > I found sk40322 and ended up disabling NTP as it recommends and just
> > running an ntpdate once an hour.  First thing I noticed was the CPU load
> > dropped by quite a bit and haven't seen a problem with dropped
> > connections since then.
> >
> > Matt
> >
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amad...
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.c...
=================================================

Bookmark with:

Delicious   Digg   reddit   Facebook   StumbleUpon

Related Messages

opensubscriber is not affiliated with the authors of this message nor responsible for its content.