-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 E. M. Recio wrote: | Folks, | | I have a problem with running Secure XL on the Nokia IP560, IPSO 4.1 | b22, r61. I am trying to lower my CPU usage to under 50% during peak. I | already have flows enabled, and I would like to enable SecureXL. | | The problem is that when I enable SecureXL, my connection count goes | through the roof even with a constant connection rate. For example, when | I enable SecureXL, within 20 minutes, my number of connections have | doubled from 17,000 to 35,000. I let it go until around 71,000 | connections. The bytes throughput went through the roof too. When I | disabled Secure XL the total number of connections plateaued at 73,000 | for 1 hour. Notably, I have my TCP Session Timeout value at 3600 seconds | - which is the only thing I saw which comes close to a 10 minute | connection related option. The descent of total number of connections | mirrored exactly the ascent. | | What could this mean? Is there some hidden option causing the number of | connections to climb? I really want to enable SecureXL to get the CPU | load to under 50% at peak hours.
In order for SecureXL to work you must match two settings. One in IPSO and one in Check Point. If you are lucky it is allready documented in SK. Otherwise I need to find the names in the call we opened for several ~ IPSO based installations which were all resolved by setting these values right. Hugo. - -- [EMAIL PROTECTED] http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHvR9ABvzDRVjxmYERAv7tAKCFtkXTAKGbf4oFe/r157ONZ1Y/OQCgqRLi g6sFGWvQYf3FP+FyKum7XY8= =X8AC -----END PGP SIGNATURE----- Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
