Hi, > Thanks. I will give this a shot. Isn't checkpoint's > Hotfixes cummilitve or > do we have to install each on?
HFAs are cumulative for CPShared and FW-1. HFA319 contains HF2 and every HFA before it. If you are going to use RTM, you'd install HF2 first (to get the RTM HF2 fixes), then HFA319 (or whichever HFA you are going to use). If you don't use RTM, you can install the HFA on top of a "plain" FP3 or on top of HF2, your choice. In the lab, installation on top of HF1 or on top of other HFAs cause no issues. In the field, we have had such constellations fail often enough for us that the rule now is "from plain FP3 or from FP3 HF2; never from FP3 HF1 or HFA3xx" Regards Shawn Behrens Integralis/Activis Managed Security Services 111 Founders Plaza East Hartford, CT 06108 1-860-528-5458 > > Thanks Shawn. > > > Thanks > > > --------------------------- > Mayooran Pooranachandran > Director, Network Services > Danier Leather Inc. > > > -----Original Message----- > From: Shawn Behrens [mailto:[EMAIL PROTECTED] > Sent: Monday, November 10, 2003 4:35 PM > To: [EMAIL PROTECTED] > Subject: Re: [FW-1] fwssd and core dumps > > Hi, > > > firewall. Today I have noticed that the fwssd is dumping core. The > > following appears on the console and in /var/adm/messages: > > box and we use > > TrendMicro's Interscan Viruswall in CVP mode). Firewall logs > > fwssd is the http security server that you use for CVP. You > say "FP3" ... > which hotfix? > > In my configurations, HFA318 has reduced the frequency of > fwssd core dumps. > We still see what looks like a memory leak: fwssd consumes > more and more > memory, dumps core, restarts. Repeat. > > HFA319 Release Notes mention memory allocation of security > servers, hence > HFA319 may help. I haven't tested that yet (waiting for some > other variables > to fall into place). > > In your situation, I'd evaluate HFA319 and go from there. If > fwssd still > dumps core, gather forensic data (regular ps excerpts, > cpinfo, fw monitor > ..... the usual stuff support asks for) and open a case with > your CSP or > CheckPoint directly. > > Regards > > Shawn Behrens > Integralis/Activis Managed Security Services > 111 Founders Plaza > East Hartford, CT 06108 > 1-860-528-5458 > > > Please note that: > > 1. This e-mail may constitute privileged information. If you > are not the > intended recipient, you have received this confidential email and any > attachments transmitted with it in error and you must not > disclose, copy, > circulate or in any other way use or rely on this information. > 2. E-mails to and from the company are monitored for > operational reasons and > in accordance with lawful business practices. > 3. The contents of this email are those of the individual and do not > necessarily represent the views of the company. > 4. The company does not conclude contracts by email and all > negotiations are > subject to contract. > 5. The company accepts no responsibility once an e-mail and > any attachments > is sent. > > http://www.integralis.com > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
