[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [FW1] slow HTTP Security Server (UFP)
Title: RE: [FW1] slow HTTP Security Server (UFP)
Is the HTTP sec server on the Firewall taking lots of CPU cycles ? Also, are you running multiple instances of the HTTP sec. server ? Something to try as each instance can only handle 1024 File Descriptors and each HTTP connection takes 2.
-----Original Message-----
From: Hartmann, Josef
To: 'Hubbard, Dan'; ''[email protected]' '
Sent: 4/3/01 9:05 AM
Subject: RE: [FW1] slow HTTP Security Server (UFP)
Hi,
I am running CP4.1SP3, Websense 4.2.4.
UFP caching is enabled.
Josef
> -----Original Message-----
> From: Hubbard, Dan [SMTP:[email protected]]
> Sent: Tuesday, April 03, 2001 5:49 PM
> To: 'Hartmann, Josef '; ''[email protected]'
'
> Subject: RE: [FW1] slow HTTP Security Server (UFP)
>
> Josef;
>
> Which version of CKP are you using ? Are you using 4.1 sp3 with UFP
> caching ? This *should* improve things as the http sec. server will
not
> get "involved" as much as "cached" queries are handled through
inspect.
>
> Thanks
>
> -----Original Message-----
> From: Hartmann, Josef
> To: '[email protected]'
> Sent: 4/2/01 4:25 AM
> Subject: [FW1] slow HTTP Security Server (UFP)
>
>
> Hi,
>
> we are running a site which has > 1000 users. These users connect
using
> a
> proxy and a url filter to the web. URL filter is Websense. The problem
> is
> that users have delays in http traffic. A delay seems to take about
> 2min.
> However this does not affect all users at the same time.
>
> As I thought I might be a problem with the URL filter or UFP, I
switched
> that one off and created an "empty" URI rule for http. Still there are
> these
> delays.
>
> I applied already Checkpoint's "Performance Tuning" however with no
> success.
>
> Does anybody know if there is any solution, patch from Checkpoint,
> hints?
>
>
> Regards,
>
> Josef
>
>
>
========================================================================
> ========
> To unsubscribe from this mailing list, please see the
instructions
> at
> <http://www.checkpoint.com/services/mailing.html>
>
========================================================================
> ========
>
