Firewall-1

Re: [FW-1] NGAI R55 HFA18

Subject: Re: [FW-1] NGAI R55 HFA18
From: Hugo van der Kooij <hvdkooij AT VANDERKOOIJ DOT ORG>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Tue, 24 Oct 2006 23:43:00 +0200
On Tue, 24 Oct 2006, sin wrote:

> Hugo van der Kooij wrote:
> > On Tue, 24 Oct 2006, sin wrote:
> > 
> >> Hugo van der Kooij wrote:
> > 
> >>> And while we never had an issue with crashing R55 firewalls we have 
> >>> several customers with R60 firewalls crashing even with Check Point and 
> >>> all working on the firewalls themselves to find the bugs.
> >> can you give a little bit more detail on what bugs you found ? maybe it
> >> could help some of us to not bang our heads in the all for nothing and
> >> call directly check point.
> > 
> > No. At this point there is no clear sign what is causing the issue. There 
> > are fixes in HFA-04 which should prevent some crashes. But HFA-04 did not 
> > fix that much in these cases.
> > 
> > The verdict is still out but all crashes happen on Linux based 
> > installations (SPLAT, RHEL, Resilience).
> > 
> > After Nokia fixed a memory leak in IPSO I have not yet seen issues there.
> > 
> > But in order to get a fix you need to open a case anyway.
> 
> I know that, I was just thinking that if you would put out a small
> description people on this list might have a faster response time from
> Check Point knowing that there might be a patch available for the issue.

It just happens that Check Point support does not work that way.

If you have a crash. Open a case. Go over the details on how to gather the 
crash info and then see what is causing the crash based on those details.

At this point I only have an inkling that it only happens on SMP systems 
and it might be just be clusters only.

But the first R60 crash was a Dell specific issue on a single CPU system. 
As the patch was allready present it only took 15 minute from opening the 
case to downloading the fix. (It is also part of HFA-01)

In fact not all of these fixes are listed explicitly in the HFA release 
notes. So in case of trouble applying a HFA may solve issues unlisted in 
the release notes.

Hugo.

-- 
        hvdkooij AT vanderkooij DOT org http://hvdkooij.xs4all.nl/
            This message is using 100% recycled electrons.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>