Hi Mike,
Do you have SmartView Monitor? It can tell you a lot about what's going on.
Have you tried any of the speed test sites while the slowdown is going on?
The best one I've found is http://www.speakeasy.net/speedtest
How many clients do you have behind FW-1 that you would have more than
25,000 connections?
Ray
From: Mike Smith <mike6733 AT COMCAST DOT NET>
Reply-To: Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] Firewall slowdown?
Date: Thu, 13 Jul 2006 02:06:00 +0000
The Checkpoint NGX R60 HFA02 system I support recently exhusted all of the
Concurrent Connections (the checkpoint log eas showing dropped
connections). I increased the value of Maximum concurrent Connections on
the Capacity Optimization property screen of the cluster object definition.
The Calculate connection hash table size and memory pool option is set to
Automatic.
There has been a very hard to explain slowdown during the afternoon. I
have satisfied myself that the performance problem is within the Firewall.
Memory/processor utilization is less than 25% of the machine.
Are there any options, related to the concurrent connections value, which
should be adjusted or reviewed?
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
