I think I confused mutli-core with multi-CPU. When we bought new hardware about four years ago we had to buy a 2-core CPU instead of the normal quad core because of our licensing.

Until CoreXL supports QoS it's staying disabled.

Ray

> Date: Fri, 24 Feb 2012 07:41:36 -0500
> From: itsec.itconsult@GMAI...
> Subject: Re: [FW-1] Connections dropping when pushing policy
> To: FW-1-MAILINGLIST@AMAD...
>
> Prior to R70, CoreXL wasn't part of maintrain code, and was only introduced
> as a special release after R65.  This is the component that makes use of
> multiple CPUs.
>
> On Nokia, you also needed IPSO version 607 or later to use this feature.
>
> On Thu, Feb 23, 2012 at 8:22 PM, Ray <sixsigma44@hotm...> wrote:
>
> > I'm confused. I thought the Nokia on R65 was the firewall. The firewalls
> > are licensed by CPU but the SmartCenters are not.
> >
> > I'm pretty sure that Check Point did not enforce the CPU limit until very
> > recent versions. But maybe not. I do get confused easily any more,
> > especially on Check Point licensing. :-)
> >
> > Ray
> >
> > > Date: Thu, 23 Feb 2012 12:18:33 +0530
> > > From: mohamedn@FSS....
> > > Subject: Re: [FW-1] Connections dropping when pushing policy
> > > To: FW-1-MAILINGLIST@AMAD...
> > >
> > > I am not getting this NTP error message, anyway have enabled "Keep all
> > > connections" as per Tom's advice. We are looking for a good time to push
> > > and test. Thanks for all people replied, will get back with the results.
> > >
> > > Ray,
> > >
> > > Why we used R75.20 was the Nokia was told to have 4 processors and it
> > > was using only 1 at a time. We were advised to use R75.20 to solve this.
> > >
> > >
> > > Regards
> > > Mohamed.n
> > >
> > >
> > >
> > >
> > >                                                      2380
> > >                                                      mohamedn@fss....
> > > +91 95001 29207
> > >
> > > -----Original Message-----
> > > From: Mailing list for discussion of Firewall-1
> > > [mailto:FW-1-MAILINGLIST@AMAD...] On Behalf Of Matthew
> > > Rossiter
> > > Sent: Wednesday, February 22, 2012 12:39 AM
> > > To: FW-1-MAILINGLIST@AMAD...
> > > Subject: Re: [FW-1] Connections dropping when pushing policy
> > >
> > > I had the same problem with a pair of Nokia's in a vrrp configuration
> > > and a large policy.  Every time I pushed policy connections would get
> > > dropped.   In the Nokia system logs I would see a lot of ' xntpd:
> > > restarting' messages.
> > > I found sk40322 and ended up disabling NTP as it recommends and just
> > > running an ntpdate once an hour.  First thing I noticed was the CPU load
> > > dropped by quite a bit and haven't seen a problem with dropped
> > > connections since then.
> > >
> > > Matt
> > >
> >
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV@amad...
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.c...
> =================================================
     


Scanned by Check Point Total Security Gateway.


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amad...
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.c...
=================================================