I do not mean any dis-respects but unless the Checkpoint engineer has actually 
tested
this in the lab environment, his advise does not carry any weigh.  I know a few 
of
checkpoint SEs who have no hand-one experiences and just spewed out stuffs
on Checkpoint literatures with nothing to backup when you pinned them down to 
a specific issue.
 
I've had numerous issues with SPLAT 2.6 kernel in both gateways and Provider-1.
It seems like in 2.6 kernel, the cpd process is binded to a single core while 
the rest
of the CPU cores stay idle.  Specifically with Provider-1 2.6 kernel, I could 
NOT migrate
CMA from NG AI R55 into this P-1 SPLAT 2.6 kernel.  The migration is successful
but the CMA refused to start.  Happened to multiple CMAs too.  I HAVE NO SUCH
ISSUES WITH PROVIDER-1 SPLAT 2.4 WITH HFA-02/249 SYSTEM.
 
At this point, I would stay away from splat 2.6 kernel.  It is extremely 
unstable.
 
That's my 2c.

--- On Tue, 7/22/08, Paul Hanson <[EMAIL PROTECTED]> wrote:

From: Paul Hanson <[EMAIL PROTECTED]>
Subject: Re: [FW-1] Upgrading Provider-1 NGx R65 2.4 kernel to P-1 NGx R65 2.6 
kernel
To: [email protected]
Date: Tuesday, July 22, 2008, 10:40 PM

Bryan,
>
> Check Point has released 2.6 for P1.   The problem is, HFA 1 & 2 are 
> not on 2.6 kernel yet.   HFA1 and HFA2 resolve some memory issues that 
> could cause some issues.  There are adhoc fixes you can apply to 
> resolve these issues if 2.6 is needed.  You should be able to obtain 
> the 2.6 kernel P1 through the support.checkpoint.com website, although 
> you will need to open a ticket up with the TAC to obtain the adhoc hot 
> fixes.   In the near future, the HFA's and code branches should be 
> merged and this problem should be resolved.
> Best regards,
>  
> Paul Hanson
> Systems Engineer
> Check Point Software Technologies, Inc.
> Tel: 972-273-0510
> E-mail: [EMAIL PROTECTED]
> Skype: PaulAllenHanson 
>
>
> Bryan Cromwell wrote:
>> Did they ever release P1 using 2.6 kernel? I have asked my rep several
times
>> and get a blank stare every time and no eta.
>>
>> On Wed, May 21, 2008 at 7:26 AM, cisco4ng <[EMAIL PROTECTED]>
wrote:
>>
>>   
>>> Hi all,
>>>
>>> Hope someone can answer this question for me.
>>>
>>> I have Provider-1 NGx R65 Secureplatform with HFA_02 and HFA_249
>>> installed. This is a Manager+container MDS. I also have an MLM
>>> NGx R65 with HFA_02 and HFA_249 installed. Everything is
>>> running on 2.4 kernel.
>>>
>>> We just purchased Dell 2950-III servers for Enforcement modules.
>>> Unfortunately, these servers only supports NGx R65 SPLAT 2.6
kernel.
>>> I do not want to manage these 2.6 kernel enforcement modules with
>>> Provider-1 NGx R65 2.4 kernel.
>>>
>>> Has anyone upgraded Provider-1 NGx R65 with HFA_02 2.4 kernel to
>>> Provider-1 NGx R65 2.6 kernel? Please advise.
>>>
>>> thanks.
>>>
>>>
>>>
>>> Scanned by Check Point Total Security Gateway.
>>>
>>> =================================================
>>> To set vacation, Out-Of-Office, or away messages,
>>> send an email to [EMAIL PROTECTED]
>>> in the BODY of the email add:
>>> set fw-1-mailinglist nomail
>>> =================================================
>>> To unsubscribe from this mailing list,
>>> please see the instructions at
>>> http://www.checkpoint.com/services/mailing.html
>>> =================================================
>>> If you have any questions on how to change your
>>> subscription options, email
>>> [EMAIL PROTECTED]
>>> =================================================
>>>
>>>     
>>
>>
>> Scanned by Check Point Total Security Gateway.
>>
>> =================================================
>> To set vacation, Out-Of-Office, or away messages,
>> send an email to [EMAIL PROTECTED]
>> in the BODY of the email add:
>> set fw-1-mailinglist nomail
>> =================================================
>> To unsubscribe from this mailing list,
>> please see the instructions at
>> http://www.checkpoint.com/services/mailing.html
>> =================================================
>> If you have any questions on how to change your
>> subscription options, email
>> [EMAIL PROTECTED]
>> =================================================
>>   

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================





Scanned by Check Point Total Security Gateway.


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to