The Active Streaming Mechanism is used in the following:
• Error concealment
• Header spoofing
• Directory listing
• ASCII only response
• "Send Error Page" checked (R60/R55W)
Any defense that sends an HTML error page to the client uses ASM. The
main difference between ASM and PSM (Passive Strea
A little more information:
The Concurrent connections problem occured when SmartDefense starting using
Active Streaming to perform layer 7 probes. My understanding is that Active
Streaming causes two half-session entries to be created in the connection
table. So you start to drop packets when
This depends on a number of things as to why you are having this issue:
1) what type of connections are going through the firewall? Checkpoint does
not
handle short and burst connections very well. One of the customers that I
managed
had a similar issue that you described. CPU and m
May be there is some attack going in your network. I had seen such
behavior earlier.
Ramki
CCNA, CCSE-NGAI
Mike Smith wrote:
The Checkpoint NGX R60 HFA02 system I support recently exhusted all of the
Concurrent Connections (the checkpoint log eas showing dropped connections). I
increased th
more than
25,000 connections?
Ray
From: Mike Smith <[EMAIL PROTECTED]>
Reply-To: Mailing list for discussion of Firewall-1
To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM
Subject: [FW-1] Firewall slowdown?
Date: Thu, 13 Jul 2006 02:06:00 +
The Checkpoint NGX R6
The Checkpoint NGX R60 HFA02 system I support recently exhusted all of the
Concurrent Connections (the checkpoint log eas showing dropped connections). I
increased the value of Maximum concurrent Connections on the Capacity
Optimization property screen of the cluster object definition. The Calc
