Hi Lars, We don't see any dropped out of state packets, that's one of the strange things. The sync network is in a dedicated network connecting both firewalls through a switch.
Thanks for your help, _______________________________ Cybertech Projects Jos� Mar�a Gabald�n Network Security Engineer email: [EMAIL PROTECTED] www.cybertech.com.ve -----Mensaje original----- De: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] En nombre de Lars Higham Enviado el: Martes, 10 de Febrero de 2004 10:12 a.m. Para: [EMAIL PROTECTED] Asunto: Re: [FW-1] Clustering with Nokia Hello Jos�, Check your logs and look for tcp state packet drops. If you're getting a lot of these, then check your sync and clustering network configurations. They should be (1) each in a dedicated subnet with no other traffic, (2) physically connected between the firewalls via a switch so that if one interface goes down it doesn't take your cluster down. Local traffic crossing the cluster may have trouble as the firewalls need a minimum of 55msec to sync state. Regards, Lars Higham -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Jos� Mar�a Gabald�n Sent: Tuesday, February 10, 2004 9:26 AM To: [EMAIL PROTECTED] Subject: [FW-1] Clustering with Nokia Hi guys, We have recently installed a Nokia Cluster with two IP350 (IPSO 3.7) and Check Point NG with Application Intelligence R54, at first it looked like everything worked fine. However, we have 1Mbps internet connection and performance decreased dramatically, in fact we turned down one of the boxes and performance went right up. This behaviour repeats not only with http sessions but even with telnet and terminal services sessions too. In Smartview Status everything look OK, CPU utilization is about 15% or less. We contacted Nokia support and they adviced to upgrade to IPSO 3.7 Build 32 and to apply Check Point HFA 406. We did it, but the results are the same. We even disabled Floodgate and Smartview Monitor of the boxes. Does anybady have an idea of what are we missing? Thanks in advance for your help, _______________________________ Jos� Mar�a Gabald�n Network Security Engineer email: [EMAIL PROTECTED] www.cybertech.com.ve ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
