I had that issue, but unfortunately was not in a stress test.
we upgraded the CP version up to R60, we found that the fw was dropping
too many packets (we have more than 75M/bps)..The load was ok, didnt
found anything weird in the platform.
When I disabled smartdefense the problem was fixed, and the fw was
working fine again.
Sebastian.
Ray wrote:
Yes, the answer is relative to how much bandwidth you have. If you're
like most companies, you probably don't have anywhere near 75 M/bps so
you would be OK. I used to run almost all SD functions turned on on an
IP530, which is a P-III 700 Mhz, and 10 M/bps of bandwidth and
everything worked well.
Ray
> Date: Tue, 9 Oct 2007 05:14:01 -0700
> From: [EMAIL PROTECTED]
> Subject: Re: [FW-1] smart defence service and ddos attacks
> To: [email protected]
>
> at my previous job, we did a stress test on Nokia IP2260 (2GB ram box)
> on NGx R61 with HFA_01 by turning on all the smart defense and web
> intelligence features. We use spirent load tester and the result was:
>
> 1: With smartdefense and web intell. features DISABLE, we were able
> to push about 800Mbps throughput with http and ftp traffics,
>
> 2: With smartdefense and web intell. features ENABLE, we were able
> to push ONLY 75Mbps throughput with http and ftp traffics.
>
> In other words, be very careful about enabling smartdefense and web
> intell. on checkpoint without knowing exactly what you want.
>
> Hugo van der Kooij <[EMAIL PROTECTED]> wrote:
> No Name Available wrote:
> > Thanks Sin,
> > What would be the effect of turning smart defence and webintelligence
> > services on services on on the gateways in terms of proc and mem
> > utilisation.
>
> It highly depends on the exact amount and type of checks you enable.
> But it will cost you some CPU power as a minimum.
>
> Hugo.
>
> --
> [EMAIL PROTECTED] http://hugo.vanderkooij.org/
> Don't meddle in the affairs of sysadmins,
> for they are subtle and quick to anger.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
>
>
> ---------------------------------
> Shape Yahoo! in your own image. Join our Network Research Panel today!
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
_________________________________________________________________
Boo! Scare away worms, viruses and so much more! Try Windows Live OneCare!
http://onecare.live.com/standard/en-us/purchase/trial.aspx?s_cid=wl_hotmailnews
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
--
Sebastian Arriada, Network Security
lastminute.com,
Phone: +44 7903994913
[EMAIL PROTECTED]
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
