I am running VPN-1 Power R61 HFA01 with VRRP on two flash based Nokia IPSO 560 with 2GB RAM. It was recommended by a consultant that we activate SecureXL. However, we noticed that when we did that within 15 minutes our connection table would start to get full (about 25k), and connectivity across the firewalls would slow down. When I took a look at Tracker I noticed A LOT of DNS requests being sent from the active Nokia box itself to our DNS servers. We then had to shutdown SecureXL and within an hour the connection tables started to go back to normal for 10PM on a weeknight (about 3k).
Why would activating SecureXL cause this to happen? Should I really turn it on, as we are hovering at 45% CPU load at our peak without SecureXL. TIA ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
