Folks, I have a problem with running Secure XL on the Nokia IP560, IPSO 4.1 b22, r61. I am trying to lower my CPU usage to under 50% during peak. I already have flows enabled, and I would like to enable SecureXL.
The problem is that when I enable SecureXL, my connection count goes through the roof even with a constant connection rate. For example, when I enable SecureXL, within 20 minutes, my number of connections have doubled from 17,000 to 35,000. I let it go until around 71,000 connections. The bytes throughput went through the roof too. When I disabled Secure XL the total number of connections plateaued at 73,000 for 1 hour. Notably, I have my TCP Session Timeout value at 3600 seconds - which is the only thing I saw which comes close to a 10 minute connection related option. The descent of total number of connections mirrored exactly the ascent. What could this mean? Is there some hidden option causing the number of connections to climb? I really want to enable SecureXL to get the CPU load to under 50% at peak hours. thanks in advance, e ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
