Thanks! One think it was causing the CPU was the DNS. When I have DNS
server put in. The appliance trying to resolve all IP in the name. I had
to remove the DNS servers entries to stop it resolving IP addresses.
I think I may just do a patch up to 70.5 and see how it goes first
before going to R75.
Cheers!
On 02/12/11 20:14, Independent IT Consultant wrote:
Have you determined the source of the CPU spike? Also, have you determined
what's eating up the disk space? If you're doing nightly backups, those
backups may be what's eating up your disk space. The log rotate and
cleanup controls only $FWDIR/log and even then only the actual log files -
not core or debug files. Have these appliances been upgraded repeatedly?
It sounds like these appliances are running as a full HA cluster.
I suggest you upgrade_export the primary, then reimage both appliances with
R75. Get off R70. And don't do another in-place upgrade.
On Wed, Nov 30, 2011 at 6:07 PM, Clive Luk<cl...@sl.nsw.gov.au> wrote:
Thanks your reply Hugo!
The weird issues actually including high cpu usage.
and I am running 2 utm-1 in active/standby mode. sometime when i install
new rule. the current active fw will become standby and the standby will be
came active. I will be receiving alert saying fw is not in sync.
also, log didn't get clean up and it fills /var/log to 100%. in smartdash
board. I have set to rotate log every midnight and set "Required Free Disk
space" for 2000MB. But it never get clean up even the logs get rotated. it
is actually failing my nightly scheduled backup job of the UTM-1
configuration. due to the space issue.
Thanks in advance!
Cheers!
On 30/11/11 22:44, Hugo van der Kooij wrote:
On 30.11.2011 00:52, Clive Luk wrote:
Dear list,
I just
want some advice on UTM-1 upgrade. I am currently running 2 UTM-1
R70.40. I am thinking of upgrading. Should I stick with R70? or should I
go to R75?
The reason I am upgrading is I found the appliances
has been acting
weird when I installing the policy.
Clive,
I
strongly sugest you define "weird" in a more technical manner. Just
trying an upgrade to solve "weird" issues may actually result in the
opposite of what you like to perform.
Hugo.
--
hvdko...@vanderkooij.org http://hugo.vanderkooij.org/
PGP/GPG? Use:
http://hugo.vanderkooij.org/**0x58F19981.asc<http://hugo.vanderkooij.org/0x58F19981.asc>
==============================**===================
To set vacation, Out-Of-Office, or away messages,
send an email to
lists...@amadeus.us.**checkpoint.com<lists...@amadeus.us.checkpoint.com>
in the BODY of the email add:
set fw-1-mailinglist nomail
==============================**===================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/**services/mailing.html<http://www.checkpoint.com/services/mailing.html>
==============================**===================
If you have any questions on how to change your
subscription options, email
fw-1-ow...@ts.checkpoint.com
==============================**===================
Scanned by Check Point Total Security Gateway.
==============================**===================
To set vacation, Out-Of-Office, or away messages,
send an email to
lists...@amadeus.us.**checkpoint.com<lists...@amadeus.us.checkpoint.com>
in the BODY of the email add:
set fw-1-mailinglist nomail
==============================**===================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/**services/mailing.html<http://www.checkpoint.com/services/mailing.html>
==============================**===================
If you have any questions on how to change your
subscription options, email
fw-1-ow...@ts.checkpoint.com
==============================**===================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to lists...@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ow...@ts.checkpoint.com
=================================================
Scanned by Check Point Total Security Gateway.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to lists...@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ow...@ts.checkpoint.com
=================================================
