Seems like an issue that you should escalate immediately to Check Point TAC.
Did you try without the McAfee variable? Minh -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]] On Behalf Of securitystig Sent: Thursday, August 13, 2009 7:51 AM To: [email protected] Subject: [FW-1] ClusterXL Ready-> Active crashing splat on Sun x2100 Hi, I have a R65 2.6 HFA50 module that crashes and reboots SecurePlatform when moving from ready to active. The machine reboots fine (to ready), is enforcing its policy when in ready state and policy can be pushed to module with no issues. It only crashes when clusterxl starts. I tested with HFA40 and it crashed at random interval well but it is now immediate with HFA50. All logs point to a interface issue. All interfaces go down besides the sync x-over (on same quad card) when switching from ready (part of upgrade) to active which is immediately followed by the crash and reboot. This deployment was originally configured with the Intel Quad cards patched directly to a McAfee IntruSheild fail-open kit as MDIX ports (auto cross-over) Anyone seen issues with this? My question is has anyone seen a issue that could cause the kernel to panic and crash? Suggested next steps: Remove all cables and force ready -> active Bypass the Mcafee IntruSheild fail-open kits Install Switch stack between Firewall and fail-open kits. (planned) fwd debug log is clean. Yet to debug clusterxl process and have set coredump and waiting on change to crash module. This module was running R60 2.4 kernel fine but had to go 2.6 to support quad cards... Thoughts? Eric Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
