Richard,
I may have your answer on the whole 3.8 vs. 3.8.1 (3.7 & 3.7.1, etc). It
is my understanding (and I could be wrong here) that unless you have the
"Nokia Encrypt Card" you do not need the "x.x.1" IPSO. I thought I saw it
posted here before that the ".1" IPSO line simply provided the needed
drivers for the Nokia Encrypt Card. It's been a while since I've
purchased hardware accelerators (I think those where the LUNA cards), but
those were simply a separate driver download and package install. So you
might want to think about staying away from the ".1" IPSO line unless you
know for sure you need it.
This link requires a Nokia login and is posted for the IP1200, but that's
only because when I searched for the difference it was the first to pop
up. (I think if I take the time to look it would be similar to the IP530
models)
https://support.nokia.com/security_platforms/docs/supplement/IP1200-EncryptCard-Supp_N451076001a.pdf
Page 6.
Good luck!
Kevin
"Quick, Richard A." <Richard.Quick AT UNISYS DOT COM>
Sent by: Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
06/21/2005 10:02 AM
Please respond to
Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
To
FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
cc
Subject
Re: [FW-1] URGENT - IP530 with high CPU uilization
When you say session authentication, do you mean as in an action type?
I don't currently have any rules with session auth.
Somehow I think this is related to the 3.8.1 033 code.
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of DIOTTE,
SHANNON S
Sent: Tuesday, June 21, 2005 10:51 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] URGENT - IP530 with high CPU uilization
It's the session auth daemon, kill it and it should respawn (if not,
stop and start the firewall if you need that process). If it's still
sucking all the CPU, edit the fwauthd.conf and comment out the process
(if you don't need it),then stop and start the firewall for the changes
to take.
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM]On Behalf Of Quick,
Richard A.
Sent: Tuesday, June 21, 2005 8:56 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] URGENT - IP530 with high CPU uilization
I have a Nokia IP530 running IPSO 3.8.1 033, NG AI R55 HFA_03, Around
1300 yesterday the cpu went to 100% where it normally runs around 3%-5%.
A show processes through the CLI is showing that in.asession is running
at 97%-98%. The process has the longest time of any other listed so I'm
guessing that it is started with the appliance. Does anyone know what
may be causing this? Has anyone else seen this in 3.8.1 033 or any
other version?
Thanks,
Rick
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
