Re: [FW-1] Reboot frequency of firewalls

2012-01-13 Thread David DeSimone
Ray wrote: > > The same as others have reported. Running SPLAT and a year uptime is > not uncommon. I generally do a version update once a year unless there > is a security patch. When I started one job, their IP530's running > IPSO 3.7 had almost 600 days of uptime. Our FW-1 4.1.SP2 firewall on

Re: [FW-1] Reboot frequency of firewalls

2012-01-13 Thread Ray
The same as others have reported. Running SPLAT and a year uptime is not uncommon. I generally do a version update once a year unless there is a security patch. When I started one job, their IP530's running IPSO 3.7 had almost 600 days of uptime. Ray > Date: Fri, 13 Jan 2012 17:22:30 +0200

Re: [FW-1] Floodgate component installed but seems not to be effective/work

2012-01-13 Thread Ray
1 bit per second? Is that what you mean by 1 Bps? Try something more usual like 56 K/bps and set just a limit and not a guarantee. It definitely works on R55 because I used to use it all the time. Do you have the QoS value set properly on the firewall's QoS tab? Ray > Date: Fri, 13 Jan 2012

[FW-1] AUTO: Stefan Offermanns is out of office. (returning 17.01.2012)

2012-01-13 Thread Stefan Offermanns
I am out of the office until 17.01.2012. In urgent cases please contact Mr.Michael Doerflinger (michael.doerflin...@de.ibm.com; Phone: +49 7132 332120) or Mr. Juergen Wewelkamp (juergen.wewelk...@de.ibm.com; Phone: +49 4205 99348 ) I will respond to your message when I return. Stefan Offermanns

Re: [FW-1] Reboot frequency of firewalls

2012-01-13 Thread Warrington Bruce - bwarri
The basic answer I would give is that you need to reboot them only as much as you find you have a problem requiring it. Some can go very long periods of time without a reboot, and a few might need it far more frequently. If you're not experiencing a problem, you don't need to proactively bounc

Re: [FW-1] Reboot frequency of firewalls

2012-01-13 Thread Dan Lynch
> Is there any specific > reason why you think that a reboot would solve anything? > > Hugo. There seems to be a correlation between uptime and virtual memory usage, though whether that's a concern at all is another matter. For example, I have two HA clusters of two members each. Cluster #1 is

Re: [FW-1] Reboot frequency of firewalls

2012-01-13 Thread Reinhard Stich
At 16:22 13.01.2012, you wrote: Hi, I would like ask how often do you reboot your firewalls? normally after installing an upgrade or HFA. windows-mgmt every 2nd tuesday of the month ... :-) br reinhard -- Reinhard Stich r.st...@arrowecs.at Arrow ECS Internet Sec

Re: [FW-1] Reboot frequency of firewalls

2012-01-13 Thread Hugo van der Kooij
a bv schreef op 2012-01-13 16:22: > I would like ask how often do you reboot your firewalls? As I hardly see a firewall on Windows I would not kwon why I would reboot a firewall unless required for a software upgrade of the Check Point software. Is there any specific reason why you think tha

Re: [FW-1] FW-1: Log buffer for tsid=0 vsid=0 is full

2012-01-13 Thread Independent IT Consultant
Start with looking at /var/log/messages, looking at the NIC stats with ifconfig and ethtool, and fw ctl pstat. On Thu, Jan 12, 2012 at 4:11 PM, a bv wrote: > Thanks this is a firewall SPLAT running on an open server . > > How can i find out the reasons ? > > > Regards > > 2012/1/12 Independent

[FW-1] Reboot frequency of firewalls

2012-01-13 Thread a bv
Hi, I would like ask how often do you reboot your firewalls? Regards Bora = To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ===

[FW-1] Floodgate component installed but seems not to be effective/work

2012-01-13 Thread blackredcat
hi all, i have a FW-1 NG AI (R55) installed on a management console and in two firewall modules; are all servers with linux SPLAT O.S.; inside management server, i can confirm that FloodGate is among the CP components installed; ..i manage lot of lan that use my check point gateway in order to go