We have a cluster and every few weeks...approximate 4 weeks,
the primary gateway would just hang....this would only
affect vpn connections, while other traffic seem to find.
After few trails and errors we concluded that were the
Accelaration III card causin the hang. We removed the
Accelator card and never had the issue again. Once removed
accelation cards, CPU usage only increased by 7%. Problem
started long before HFA18...
We are using SPLAT in ClusterXL environment.
I hope this may help someone with a similar issue...
----- Original Message ----
From: Hugo van der Kooij <hvdkooij VANDERKOOIJ.ORG>
To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Sent: Tuesday, October 24, 2006 4:43:00 PM
Subject: Re: [FW-1] NGAI R55 HFA18
On Tue, 24 Oct 2006, sin wrote:
> Hugo van der Kooij wrote:
> > On Tue, 24 Oct 2006, sin wrote:
> >
> >> Hugo van der Kooij wrote:
> >
> >>> And while we never had an issue with
crashing R55 firewalls we have
> >>> several customers with R60 firewalls
crashing even with Check Point and
> >>> all working on the firewalls themselves to
find the bugs.
> >> can you give a little bit more detail on what
bugs you found ? maybe it
> >> could help some of us to not bang our heads in
the all for nothing and
> >> call directly check point.
> >
> > No. At this point there is no clear sign what is
causing the issue. There
> > are fixes in HFA-04 which should prevent some
crashes. But HFA-04 did not
> > fix that much in these cases.
> >
> > The verdict is still out but all crashes happen on
Linux based
> > installations (SPLAT, RHEL, Resilience).
> >
> > After Nokia fixed a memory leak in IPSO I have not
yet seen issues there.
> >
> > But in order to get a fix you need to open a case
anyway.
>
> I know that, I was just thinking that if you would put
out a small
> description people on this list might have a faster
response time from
> Check Point knowing that there might be a patch
available for the issue.
It just happens that Check Point support does not work that
way.
If you have a crash. Open a case. Go over the details on how
to gather the
crash info and then see what is causing the crash based on
those details.
At this point I only have an inkling that it only happens on
SMP systems
and it might be just be clusters only.
But the first R60 crash was a Dell specific issue on a
single CPU system.
As the patch was allready present it only took 15 minute
from opening the
case to downloading the fix. (It is also part of HFA-01)
In fact not all of these fixes are listed explicitly in the
HFA release
notes. So in case of trouble applying a HFA may solve issues
unlisted in
the release notes.
Hugo.
--
hvdkooijvanderkooij.org http://hvdkooij.xs4all.nl/
This message is using 100% recycled electrons.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================
|