Are you sure you haven't got SmartDefense turned up too high? I was just at a customer last week, getting spanked because they had attack ID CPAI-2005-117 turned on.
This customer has a Nokia IP350 and a 10mb/s Internet link. The firewall was utterly overwhelmed just trying to scan all the HTTP traffic. It literally brought the network to its knees. I suggest saving a temporary rulebase, and turning off Smartdefense completely in this temporary rulebase. Then, check your CPU load to see if it goes down. If it does, you then know where to look and can turn SmartDefense features on one at a time to find the culprit. On 12/3/05, Tom Louis <[EMAIL PROTECTED]> wrote: > We have a pair of Nokias that are getting the heck > kicked out of them by just traffic, no tranlation or > encryption. > > > Nokia has sugested the we use Secure XL instead of > Flows. Since I have never messed with Secure XL, I > figured I would look for some opinions. > > Thank you for your Time. > > Tom > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Keep flying, and stay shiny. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
