You are right, my answer indeed was not complete - if connections would have hogged CPU, I thought Mel would have indicated it or even resolved it but he questioned and I answered purely from that perspective - btw, no answer is complete - it begets more questions, is it not;-)? -r
On 1/23/07, cisco4ng <[EMAIL PROTECTED]> wrote:
Your information is incomplete. the answer is, it depends. Your firewalls could be passing 10Mbps traffics and the CPU could be running at 100% if you have a lot of connections "fw ctl pstat". I have an Nokia IP740 running Checkpoint NGx R61 with HFA_01 and IPSO 4.1build 19. This firewall can pass 80Mbps of VPN traffics AES-256/SHA-1/DH-14/PFS and the CPU is running at about 45%. But that is because my testing is both ftp ans scp so I don't have that many connections on the firewalls. as a side note, whatever information provided by Nokia, take those values and multiply by .25. That's how you expect to get in a production environment. Mel Cheng <[EMAIL PROTECTED]> wrote: Hi : We met a problem about the FW CPU loading raised to 90% when throughput reach to 50M bps. Our platform is Nokia IP740 with 1G memory, IPSO3.8 ,and FW is R55, So do you know any capacity limit in IP740 with R55? Many Thanks, Mel ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= --------------------------------- TV dinner still cooling? Check out "Tonight's Picks" on Yahoo! TV. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
