RE: [FW1] Problem with Websense & Checkpoint

["Hubbard, Dan" <dhubbard@FW1-NOSPAMwebsense.com>]

Title: RE: [FW1] Problem with Websense & Checkpoint

Yes unfortunately this problem is with both NT and Solaris versions of FW-1 and yes the fix is the same for both.

Let me know if you need any assistance with the upgrade.

-----Original Message-----
From: bpeters@smbc-lf.com [mailto:bpeters@smbc-lf.com]
Sent: Monday, May 07, 2001 7:52 AM
To: Hubbard, Dan; fw-1-mailinglist@lists.us.checkpoint.com
Subject: RE: [FW1] Problem with Websense & Checkpoint

The original poster has his FW-1 on Solaris. Can we assume that same
problem occurs if the FW is NT based? I've heard of the same type of
problem with NT FW-1 and NT Websense but I wanted to confirm the
explanation (and solution) are the same.

"Hubbard, Dan" <dhubbard@websense.com>@lists.us.checkpoint.com on
05/04/2001 05:52:16 PM

Sent by:  owner-fw-1-mailinglist@lists.us.checkpoint.com

To:   "'Milliken, Larry'" <lmilliken@uslec.com>, "'Joe Dalton'"
      <ksheri@chez.com>, fw-1-mailinglist@beethoven.us.checkpoint.com
cc:

Subject:  RE: [FW1] Problem with Websense & Checkpoint

Yes we have seen this. In most cases it is the HTTP security server that is
causing the Firewall to slow down. Do you see the in.ahttpd deamon taking
lots of CPU resources on your Firewall ? If so, then the sec. server is
most likely the issue.

We highly recommend that you upgrade to Websense V 4.2.4 with FW-1 SP3. The
reason for this is that the new UFP version is supported. The new UFP
includes a feature called "UFP Caching" which uses the inspection module
for processing instead of the sec. server. This has proved to be more
scaleable as inspection is done in kernel space as opposed to a process.

For more details on UFP caching check our website here:
http://www.websense.com/support/documentation/index.cfm

The docs is called Firewall-1 setup guide addendum.

Let me know if you need more help on this.

Currently having a problem with Websense v3.1 & Checkpoint Fw4.1/SP2
The Websense is on a NT4 box, the FW4.1 is on Solaris (Both OS with latest
patches/ServicePacks)

Over a period of a couple of days I begin to lose resources on the Unix box

to the point I either have to reboot the box or disable the http scan
rule..I've had outside consultants in to take a look at it & evidently this

is a known problem with these 2 products..At this time I cannot go to
another http scan solution (for probably 3 months)...Has anyone out there
seen this & if so, is there a solution (other than tossing Webense or
upgrading Websense)?

Thanks in advance,

Larry Milliken
USLEC

================================================================================

     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================