We are using ip390 pair in HA mode with lots of natting and a couple site to site tunnels.
Kind regards Tauseef Khan Infrastructure Team Mob: 07796447091 -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of David DeSimone Sent: 14 November 2007 17:27 To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: Re: [FW-1] checkpoint secure xl and nokia vrrp monitored circuits -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 cisco4ng <[EMAIL PROTECTED]> wrote: > > During my extensive testing with NGx R61 w/ hfa_01 on Nokia IPSO 4.1 > build 19, I found that SecureXL is not recommended when you have > static NAT or VPN. During my test, I noticed that enabling SecureXL > broke VPN and SecureRemote/client and that it did not help when I have > static NAT on the firewall What hardware was your Nokia platform? We have found that on Nokia IP390, SecureXL works quite well, but on Nokia IP560, SecureXL ... does not work quite well, giving the results you described above. In our configuration, we do not use static NAT, only VPN, and VPN usage would drive CPU levels sky-high, leading to failure. We are still hammering Nokia for a fix to this condition. - -- David DeSimone == Network Admin == [EMAIL PROTECTED] "This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, dis- tribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments. Verio, Inc. makes no warranty that this email is error or virus free. Thank you." --Lawyer Bot 6000 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFHOy/uFSrKRjX5eCoRAiL3AJ0VCR6MAYvKDOyh1oXnYliGHTUsLQCbBX2C ipFCo7GvAEs/8BjSUrrL3yE= =DYq4 -----END PGP SIGNATURE----- ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= This electronic message contains information from bet365 Group Limited which may be privileged or confidential. The information is intended to be for the use of the individual(s) or entity named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this electronic message in error, please notify us by telephone or email immediately. Activity and use of the bet365 Group Limited email system is monitored to secure its effective operation and for other lawful business purposes. Communications using this system will also be monitored and may be recorded to secure effective operation and for other lawful business purposes. bet365 Group Limited Registered office: Hillside, Festival Way, Stoke-on-Trent, Staffordshire, ST1 5SH Registered in England no. 3958393 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
