yesterday I installed a combined NG AI R55 (from Dec 23rd) enforcement module and log server on a E220R running Solaris 8.
At first everything worked fine until I changed the fw's object to log locally instead of to the central management. At this point the system load went from 0.hardlyanything to 1.3 and the fw process drew between 55% and 95% CPU (up from a one-figure percentage).
Due to high load the box was from time to time no longer able to log to itself which it stated in the firewall logs. Strangely a second remote enforcement module which was also configured to log to this log server worked always flawlessly.
Furthermore when the box was logging it repeated certain old log entries over and over (yes it was the same entry including the long passed time-stamp). I guess that these logs were created when it had problems to log to itself and went into some internal buffer.
As soon as I switched the logging back to the central management everything worked fine again.
Has anyone seen this behaviour before?
thanks
Joachim Bassmann, DELOS AG, Stuttgart, Germany ------------------------------------------------------------ Erst wenn das letzte Counterstrike indiziert, der letzte Videofilm verboten, und das Internet geschlossen ist, werdet Ihr merken, da� Ihr Eure Kinder doch erziehen m�sst. - [EMAIL PROTECTED]
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
