RE: [FW1] Floodgate problems

["Luke, Jason (ISS Southfield)" <jluke@FW1-NOSPAMiss.net>]

I would bet that your FloodGate is working correctly.  You just need to try
a new test to prove it.  With your test, I doubt you are generating enough
traffic to necessitate your IP getting 90% of the bandwidth.   It only gives
you extra bandwidth if you need it, so I dont think you are generating
enough http traffic to warrant it - so the extra bandwidth would still be
distributed among other traffic.
Trying doing an FTP from your laptop (big file) and then LIMIT your
bandwidth to a tiny amount and you will see your FTP session crawl....
Use the FTP HASH command to see it slow down with your own eyes.


-----Original Message-----
From: Ashwin Nand [mailto:anand001@itc.gov.fj]
Sent: Monday, June 04, 2001 9:09 PM
To: 'fw-1-mailinglist@lists.us.checkpoint.com'
Subject: [FW1] Floodgate problems



I'm a total newbie with this particular module and am having major trouble
with it at the moment.

The Floodgate service has installed fine/running and "fgate stat" output
looks ok also .
My problen with Floodgate is that it seems to be completly ineffective in
managing bandwidth(at least i think so)
After dedicating 90 % of the bandwidth to the my PC for http , I don't
notice any changes, speed improvement etc etc.
Checking the log viewer reveals a lot of this  in the info column for
Floodgate-1:

"tc-action:no-control connid:xx
............................................."


where xx=number
      .....= some packet information


"fgate stat" output:
C:\>fgate stat
Getting FloodGate-1 Status from ntsrv003
CPQANC7: Policy httpGuarantee4ITC installed:
    There are 171 active conversations.
    (in) : Rate Limit=65536 Bps, Pending:0 pkts, 0 bytes
              Avg rate = 7464 Bps.
              NFlows=161, NPFlows=9
    (out): Rate Limit=65536 Bps, Pending:0 pkts, 0 bytes
              Avg rate = 10511 Bps.
              NFlows=167, NPFlows=0
Done.



I'm running :Checkpoint 4.1/SP3 with FloodGate-1 SP3
OS Software :NT 4.0 Server/SP 6a 
Hardware    :Compaq Proliant ML 370 Pentium III with 128MB RAM
NICS        :Compaq NC3134 Fast Ethernet NICs


Can someone help me please. Is this thing totally ineffective or am i
missing out on something simple ?


Ashwin N
ITC Services



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================