I have also seen this. Look at how big the rulebases.fws file is.  I
believe that the file gets corrupted in a upgrade.  What I did is
removed all of the rulebases I no longer used and recreated the
rulebase.fws file.

James

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED]] On Behalf Of
Markus Krieger
Sent: Friday, May 10, 2002 8:13 AM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] Very slow save time on recently upgraded NG
management station wi th 4.

Yes we've got the same problem and we also doesn't have an answer to
this.
Although we know that this issue is known to checkpoint nobody can help
us.
Unfortunatly it isn't possible to downgrade the management station.
Regards


M. Krieger

#######################################################################


[FW-1] Very slow save time on recently upgraded NG management station wi
th
4.1 firewalls
Forum:   SecurePoint - CheckPoint FireWall-1 Archive
Date:      Apr 04, 16:43
From:      Kalat, Andrew (ISS Atlanta <[EMAIL PROTECTED]>

Good day all,
        We have been seeing an odd problem with a newly upgraded NG
management station. This management station manages about 25 4.1, sp4
firewalls. After upgrading the management box to NG, FP1, we noticed
extremely long save times. Saves went from about 30 seconds on 4.1 to
5.5
Minutes on NG.

Details:
Management box is on Solaris 2.7, running on a sparc platform.
DNS resolution is working fine. I've done multiple nslookups of all
devices
involved to ensure happiness.
CPU goes to 100% during the save time, then drops back down to near
idle.
Save time is the same regardless if you are installing or simply saving.
Under 4.1, everything was running very happily and speedily.

Has anyone seen anything like this? Any pointers on how to troubleshoot?
Thanks in advance for any info you might have.

Andy



---------------------------------------------------------
Andrew J. Kalat,                | Direct:(404)236-2713
IT Infrastructure Manager       | Main:  (404)236-2600
Internet Security Systems, Inc. | E-Mail: [EMAIL PROTECTED]
6303 Barfield Road                | <http://www.iss.net/>;
Atlanta, GA 30328                         | PGP key available.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================








_________________________________________________________________
Mit MSN Fotos k�nnen Sie problemlos Ihre Fotos ausdrucken und anderen
Benutzern zur Verf�gung stellen:
http://photos.msn.com/support/worldwide.aspx

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to