cisco4ng wrote:
I check the cpu status on the nokia via
"vmstat 1" and the cpu is maxing out at 100% utilization. WTF!
Now if I am running the checkpoint on the Nokia as a standalone firewall, it gets
worse. Everytime I have to push the policy, it takes about 10 minutes for
the policy
to get pushed and if I even have active vpn tunnels, even without traffics,
the policy
installed will fail.
I tested the IP130 with ipso 3.7.1 and NG with AI R55w and the performance is
about
20 times faster than NGx. My VPN tunnels still work during the policy push.
cisco4ng,
I had the same when going from 4.1 to NG on a sparcstation 5 with 128MB
(standalone).
Policy push hogging the CPU for 15 minutes before getting through.
An extra 128mb did the trick ... 10 sec push.
Ronny
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
