IP350 NGX Memory Utilization

I've looked through the archives, and didn't see an answer
to this
question... so I thought I'd ask the experts.

We recently upgraded our 512MB IP350 from NG to NGX R61.  In
so doing,
the memory utilization went through the roof, from a maximum
of MAYbe
70% memory utilization to now NEVER being LESS than 95%
memory
utilization.

We have pretty low traffic levels (typically less than 10%
CPU
utilization), and no more than three or four SecuRemote VPN
users at a
time, so I was shocked at the difference.

My question: Given that we've maxed out the box (with
512MB) is the high
memory utilization anything we should be concerned about? 
Or is the
memory utilization we're seeing just attributable to memory
caching?

I'd hate to swap my IP350 out to an IP380 just to be able
to load it
with more memory...

Config Details:

IP350
IPSO 4.0
NGX R61
512MB memory
Plenty of swap space available (15% in use)


Many thanks,

Peter

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Hi there

Its standard practice for the freeBSD and Unix type
filesystems.

It holds data in the memory until needed for something else
which is very
productive and efficient.

No need for upgrades !

Cheers.

On 27/06/06, Peter G. Viscarola <PeterGVosr.com> wrote:
>
> I've looked through the archives, and didn't see an
answer to this
> question... so I thought I'd ask the experts.
>
> We recently upgraded our 512MB IP350 from NG to NGX
R61.  In so doing,
> the memory utilization went through the roof, from a
maximum of MAYbe
> 70% memory utilization to now NEVER being LESS than 95%
memory
> utilization.
>
> We have pretty low traffic levels (typically less than
10% CPU
> utilization), and no more than three or four SecuRemote
VPN users at a
> time, so I was shocked at the difference.
>
> My question: Given that we've maxed out the box (with
512MB) is the high
> memory utilization anything we should be concerned
about?  Or is the
> memory utilization we're seeing just attributable to
memory caching?
>
> I'd hate to swap my IP350 out to an IP380 just to be
able to load it
> with more memory...
>
> Config Details:
>
> IP350
> IPSO 4.0
> NGX R61
> 512MB memory
> Plenty of swap space available (15% in use)
>
>
> Many thanks,
>
> Peter
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

hi,

you can check with a "ps aux" what process takes
all your memory...

cheers
reinhard

At 17:02 27.06.2006, you wrote:
>I've looked through the archives, and didn't see an
answer to this
>question... so I thought I'd ask the experts.
>
>We recently upgraded our 512MB IP350 from NG to NGX R61.
 In so doing,
>the memory utilization went through the roof, from a
maximum of MAYbe
>70% memory utilization to now NEVER being LESS than 95%
memory
>utilization.
>
>We have pretty low traffic levels (typically less than
10% CPU
>utilization), and no more than three or four SecuRemote
VPN users at a
>time, so I was shocked at the difference.
>
>My question: Given that we've maxed out the box (with
512MB) is the high
>memory utilization anything we should be concerned
about?  Or is the
>memory utilization we're seeing just attributable to
memory caching?
>
>I'd hate to swap my IP350 out to an IP380 just to be
able to load it
>with more memory...
>
>Config Details:
>
>IP350
>IPSO 4.0
>NGX R61
>512MB memory
>Plenty of swap space available (15% in use)
>
>
>Many thanks,
>
>Peter
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to LISTSERVamadeus.us.checkpoint.com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http:
//www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>fw-1-ownerts.checkpoint.com
>=================================================

-- 
Reinhard Stich          r.stichinternet-security.at
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

>
> you can check with a "ps aux" what process
takes all your memory...
>
>

Probably not. Indicative to previous replies; some unixes
may
allocate free mem to buffer cache(s).  This won't be
revealed
with 'ps aux'.

M.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Hi,

I have also faced similar problem in our setup. After
upgrading to NGX
memory utilization doesn't come down to 95 and your VPN's
will not work.

Sometimes it comes down by rebooting the Nokia box. But it
will come up
again to 95% once you install policy.

We had reported the issue to Nokia TAC but didn't receive
any solution.

Regards,

Jignesh Joshi
ITIMD
Tel # 2829-1454 ext 5290
Link Line ext: 601-397


-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of Peter G.
Viscarola
Sent: Tuesday, June 27, 2006 8:32 PM
To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Subject: [FW-1] IP350 NGX Memory Utilization

I've looked through the archives, and didn't see an answer
to this
question... so I thought I'd ask the experts.

We recently upgraded our 512MB IP350 from NG to NGX R61.  In
so doing,
the memory utilization went through the roof, from a maximum
of MAYbe
70% memory utilization to now NEVER being LESS than 95%
memory
utilization.

We have pretty low traffic levels (typically less than 10%
CPU
utilization), and no more than three or four SecuRemote VPN
users at a
time, so I was shocked at the difference.

My question: Given that we've maxed out the box (with
512MB) is the high
memory utilization anything we should be concerned about? 
Or is the
memory utilization we're seeing just attributable to memory
caching?

I'd hate to swap my IP350 out to an IP380 just to be able
to load it
with more memory...

Config Details:

IP350
IPSO 4.0
NGX R61
512MB memory
Plenty of swap space available (15% in use)


Many thanks,

Peter

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================


http://www.patni.com
World-Wide Partnerships. World-Class Solutions.
____________________________________________________________
_________

This e-mail message may contain proprietary, confidential or
legally
privileged information for the sole use of the person or
entity to
whom this message was originally addressed. Any review,
e-transmission
dissemination or other use of or taking of any action in
reliance upon
this information by persons or entities other than the
intended
recipient is prohibited. If you have received this e-mail in
error
kindly delete  this e-mail from your records. If it appears
that this
mail has been forwarded to you without proper authority,
please notify
us immediately at netadminpatni.com and delete this
mail. 
____________________________________________________________
_________

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================