In case somebody is interested:
yesterday I installed a combined NG AI R55 (from Dec 23rd) enforcement module and log server on a E220R running Solaris 8.
At first everything worked fine until I changed the fw's object to log locally instead of to the central management. At this point the system load went from 0.hardlyanything to 1.3 and the fw process drew between 55% and 95% CPU (up from a one-figure percentage).
Setting it to "Send logs to this module" was the mistake. It has to be done this way: - Remove $FWDIR/conf/masters from the module - Set the object to "Use localdefinitions for Log Servers" - Install the policy
Since I did this the module has hardly any load and logs fine to its own log server.
Joachim Bassmann, DELOS AG, Stuttgart, Germany ------------------------------------------------------------ Erst wenn das letzte Counterstrike indiziert, der letzte Videofilm verboten, und das Internet geschlossen ist, werdet Ihr merken, da� Ihr Eure Kinder doch erziehen m�sst. - [EMAIL PROTECTED]
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
