cisco4ng a écrit :
Yes, I can push policy to both Nokia cluster members.
Yes, if I increase the nokia priority on the other one from 95 to 105 and make it active node,
I do not see this problem.
I would have to do a fwm logexport on both the CMA and the nokia itself to compare the log.
My guess is that some of the logs are not being sent to CMA. Otherwise, the
log file
on the Nokia "fw.log" wouldn't be 500MB everyday.
I start seeing this issue about 6 months ago. The firewall has been in place for almost
two years now.
I suppose nokia or checkpoint already asked you to run debug vs fwd on
gateway and CMA, and also to reset the SIC between the CMA and the
gateway ...
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================