RE: [FW1] Requirements for FW-1/VPN-1 and Floodgate on Nokia IP 330

["Juan Concepcion" <juanconcepcion@FW1-NOSPAMearthlink.net>]

What your supplier is telling you is somewhat true.  FloodGate is a very
memory intensive program that must allocate x bytes of memory for every
connection that it handles, mind you this is in addition to what the
firewall requires for memory to keep track of normal connections.  Now
Nokia's IPSO by default only release about 20-25% of the actual memory to
any other processes that are running on the box.  This can be fixed by
running modzap on the kernel and 'forcing' it to release more memory, up to
about 60 percent, of the available memory.  Hence is why before they used to
require 700+MB of RAM only so that the NOKIA would release about 150MB's to
the other applications (FG/FW process).  Only problem, as I'm quickly
finding out while working on this issue with one of our customers, is that
they have no clear understanding of what if any underlying effects there may
be to the NOKIA's OS by taking more memory from it.  Essentially I would
suggest escalating this matter to Checkpoint/NOKIA and add to the pressure
of them getting this to work because it's kind of difficult to justify
telling someone to spend more $$$ simply because there isn't a solid
solution to a problem.  The hardware upgrade simply turns into a band-aid
where, once the problem goes away because you've just invested in all this
hardware, they can shoo you off and tell you your fixed.

-----Original Message-----
From: owner-fw-1-mailinglist@lists.us.checkpoint.com
[mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]On Behalf Of
Hager Marcus
Sent: Wednesday, September 26, 2001 6:31 AM
To: 'Firewall-1 Mailing-List (Checkpoint)'
Subject: [FW1] Requirements for FW-1/VPN-1 and Floodgate on Nokia IP 330




> Hi,
>
> We have got a Nokia IP 330, IPSO 3.3, purchased in the beginning of 2001
> and running FW-1/VPN1 4.1 (both Module+Management).
> We are now planning to set up Floodgate-1 on the same machine (bandwith on
> the WAN link is 768 kbit/s).
>
> Our supplier told me, we would need *more* than 256 MB of RAM (512
> recommended) for running both FW-1/VPN-1 and FG on this machine.
> This, he told me then, is not possible (or "only" not supported by Nokia
> ?) with the IP 330.
>
> Is this really true ?
> I can't believe that, because this would mean that it is never possible to
> run FW-1/VPN-1 and FG on a IP 330 !
> Has anyone made some experiences with such a setup ?
>
> Thank you in advance,
> Marcus
>
> -----------------------------------
> Marcus Hager
> START Amadeus GmbH
> marcus.hager@start.de
>
>


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================