NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Erratic Performance on NT



I think this is a big thing with 4.1 sp2 and sp3.  There are also issues (memory leaks) with Solaris 2.6.  Several others have noticed this (including us) and we were able to slow it down but never eliminate it.  There are no fixes for Solaris - Checkpoint recommends keeping patch levels current or upgrading software.  We went to sp3 from sp2 because of buggy software  and it leaked badly. Checkpoint stance is that it doesn't exist as a result of their software and that it is everyone else's problem on different hardware and software.  The only constant is that there is a leak. I suspect it has to do with some type of licensing kludge, IMHO.  That appears to be the only major change. Sorry about the rant. 

>>> Steven Zimmerman <[email protected]> 1/31/01 11:45:57 AM >>>

Are you running out of physical memory?  We have the same problem with NT4.0
SP6a FW 4.1 SP3.  But one of the fw.exe is eating up all the memory.  Most
of the time we can do an FWSTOP/FWSTART and that fixes the problem....for a
day or two.   

I've had a couple people stat the same thing...  Anyone know where we can go
to try to trouble shoot this??  What's the easiest way (if any) to find out
which security server is associated with which fw.exe??  

Thanks in advance!

Steven Zimmerman
CIO
IR Network Solutionsfax

 -----Original Message-----
From: 	Andy David [mailto:[email protected]] 
Sent:	Wednesday, January 31, 2001 11:36 AM
To:	'Paul Hansson'; '[email protected]';
'[email protected]' 
Subject:	RE: [FW1] Erratic Performance on NT


Sounds like a memory leak...
Any other apps running on this box?


Andy David
J. Muller International / Egis, Inc.




-----Original Message-----
From: Paul Hansson [mailto:[email protected]] 
Sent: Wednesday, January 31, 2001 11:07 AM
To: '[email protected]';
'[email protected]' 
Subject: [FW1] Erratic Performance on NT



We are witnessing erratic performance from our FW-1 system. Before we give
up completely on this platform, can I ask if any of you have suffered from
(and hopefully corrected) the following.

We are currently running FW1 v4.0 build 4055, on NT4/SP5, but the conditions
we notice have been with us through various builds of FW1 since v3 and
various NT service packs. Our firewall hardware is configured with three
interfaces. We use NAT for some of our internal hosts, and also those in our
DMZ. We also have three VPN's set up to our sister companies. These are
using FWZ encryption. We do no content checking or SMTP relay checking.
Those functions are carried out elsewhere.

>From a reboot, the firewall will perform very well with transfer rates
between 50KB/s and 60KB/s reported by Internet Explorer for downloads. The
system will perform like this for anything between a few hours to a maximum
of about five or six days. At the end of that period, performance through
the firewall is excruciatingly slow, with transfer rates such as 300
bytes/sec typically reported by Internet Explorer.

Once the firewall gets into this state, only a reboot of the system will
resolve the problem. Stopping and starting the firewall does not solve the
problem. Interestingly, the firewall hardware (a 266Mhz Pentium II with
256MB RAM) remains equally responsive throughout. Only network throughput
seems to be affected. There are no consistent entries in either the FW1 or
NT logs to indicate a cause for this. We have a box outside of our firewall,
on our link to the Internet. When the firewall is performing poorly,
throughput from this host is as normal, so the link appears not to be at
fault.

Can anybody give me a hint as to how I can resolve this issue?

Regards,
Paul 

-----------------------------------------------------------------
Paul Hansson 
Manager, IT
Tribon Solutions (UK) Limited
(name change 22nd of June 2000 from Kockums Computer Systems (UK) Limited)
Centre for Advanced Industry, Coble Dene, Royal Quays,
North Shields, Tyne & Wear NE29 6DE, UK 
Tel:, Fax:Email: [email protected] 
Web: www.tribon.com 



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html 
============================================================================
====


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html 
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html 
================================================================================


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.