Hi,
theres a bug in checkpoint - we had the same issue (R60) and received a
special hotfix,
which has to be installed on the gateway.
The hotfix should now be included in R65 for ipso, but we didn´t test
that till now.
Contact your checkpoint support to get a fix for that issue.
kind regards,
Alex
E. M. Recio schrieb:
I am running VPN-1 Power R61 HFA01 with VRRP on two flash based Nokia
IPSO 560 with 2GB RAM. It was recommended by a consultant that we
activate SecureXL. However, we noticed that when we did that within 15
minutes our connection table would start to get full (about 25k), and
connectivity across the firewalls would slow down. When I took a look at
Tracker I noticed A LOT of DNS requests being sent from the active
Nokia box itself to our DNS servers. We then had to shutdown SecureXL
and within an hour the connection tables started to go back to normal
for 10PM on a weeknight (about 3k).
Why would activating SecureXL cause this to happen? Should I really turn
it on, as we are hovering at 45% CPU load at our peak without SecureXL.
TIA
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
