|
All,
We have some "enterprise" class
firewalls (Nokia 650s w/Checkpoint 4.1 SP5) configured in a failover
arrangement. It seems like we have some misconfigured items on the
firewalls because we watch the connections slowly creep up and when they
release, it only releases a few sessions from the state table - seems to leave
the firewalls in a less than perfect state. The only way to "fully"
recover is to reboot the boxes and then we're starting off fresh again. So
my question is... is there document out there that walks Firewall Admins through
configuring the firewalls for an environment with 40,000 users to maximize the
efficiency of the firewalls? We're nat-ing out several connections.
I've been on Phoneboy but have only found some sporadic articles. Any
books? Whitepapers? You name it...
Thanks in advance...
Brian
|
