You are right, my answer indeed was not complete - if connections would have
hogged CPU, I thought Mel would have indicated it or even resolved it but he
questioned and I answered purely from that perspective - btw, no answer is
complete - it begets more questions, is it not;-)?
-r
On 1/23/07, cisco4ng <cisco4ng AT yahoo DOT com> wrote:
Your information is incomplete.
the answer is, it depends. Your firewalls could be passing 10Mbps
traffics and the CPU
could be running at 100% if you have a lot of connections "fw ctl
pstat".
I have an Nokia IP740 running Checkpoint NGx R61 with HFA_01 and IPSO
4.1build 19.
This firewall can pass 80Mbps of VPN traffics AES-256/SHA-1/DH-14/PFS
and the CPU is
running at about 45%. But that is because my testing is both ftp ans
scp so I don't have
that many connections on the firewalls.
as a side note, whatever information provided by Nokia, take those
values and multiply
by .25. That's how you expect to get in a production environment.
Mel Cheng <mel.cheng AT NOKIA DOT COM> wrote:
Hi :
We met a problem about the FW CPU loading raised to 90% when
throughput reach to 50M bps. Our platform is Nokia IP740 with 1G memory,
IPSO3.8
,and FW is R55,
So do you know any capacity limit in IP740 with R55?
Many Thanks,
Mel
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
---------------------------------
TV dinner still cooling?
Check out "Tonight's Picks" on Yahoo! TV.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
