We have a cluster and every few weeks...approximate 4 weeks, the primary gateway would just hang....this would only affect vpn connections, while other traffic seem to find. After few trails and errors we concluded that were the Accelaration III card causin the hang. We removed the Accelator card and never had the issue again. Once removed accelation cards, CPU usage only increased by 7%. Problem started long before HFA18... We are using SPLAT in ClusterXL environment. I hope this may help someone with a similar issue...
----- Original Message ---- From: Hugo van der Kooij <[EMAIL PROTECTED]> To: [email protected] Sent: Tuesday, October 24, 2006 4:43:00 PM Subject: Re: [FW-1] NGAI R55 HFA18 On Tue, 24 Oct 2006, sin wrote: > Hugo van der Kooij wrote: > > On Tue, 24 Oct 2006, sin wrote: > > > >> Hugo van der Kooij wrote: > > > >>> And while we never had an issue with crashing R55 firewalls we have > >>> several customers with R60 firewalls crashing even with Check Point and > >>> all working on the firewalls themselves to find the bugs. > >> can you give a little bit more detail on what bugs you found ? maybe it > >> could help some of us to not bang our heads in the all for nothing and > >> call directly check point. > > > > No. At this point there is no clear sign what is causing the issue. There > > are fixes in HFA-04 which should prevent some crashes. But HFA-04 did not > > fix that much in these cases. > > > > The verdict is still out but all crashes happen on Linux based > > installations (SPLAT, RHEL, Resilience). > > > > After Nokia fixed a memory leak in IPSO I have not yet seen issues there. > > > > But in order to get a fix you need to open a case anyway. > > I know that, I was just thinking that if you would put out a small > description people on this list might have a faster response time from > Check Point knowing that there might be a patch available for the issue. It just happens that Check Point support does not work that way. If you have a crash. Open a case. Go over the details on how to gather the crash info and then see what is causing the crash based on those details. At this point I only have an inkling that it only happens on SMP systems and it might be just be clusters only. But the first R60 crash was a Dell specific issue on a single CPU system. As the patch was allready present it only took 15 minute from opening the case to downloading the fix. (It is also part of HFA-01) In fact not all of these fixes are listed explicitly in the HFA release notes. So in case of trouble applying a HFA may solve issues unlisted in the release notes. Hugo. -- [EMAIL PROTECTED] http://hvdkooij.xs4all.nl/ This message is using 100% recycled electrons. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
