topic Re: SK33760 - How to change SIP values in General Topics

SK33760 - How to change SIP values

ebalmon — Tue, 23 May 2023 13:11:21 GMT

I can't find it. Anyone can help me?

Best regards

Re: SK33760 - How to change SIP values

the_rock — Tue, 23 May 2023 13:18:53 GMT

Maybe its internal sk, you can call TAC and ask. Below is what I get and I have advanced/expert access.

Andy

Re: SK33760 - How to change SIP values

the_rock — Tue, 23 May 2023 13:20:15 GMT

Though, to add to my 1st post, Im fairly poisitive its referring to below:

Re: SK33760 - How to change SIP values

ebalmon — Tue, 23 May 2023 13:58:23 GMT

Thanks dude!

sorry,forgot to say that it is in Smart Console R81.10☹️

Re: SK33760 - How to change SIP values

the_rock — Tue, 23 May 2023 14:05:06 GMT

Makes no difference bro, that option has been there probably since last century lol. Did it work?

Andy

Re: SK33760 - How to change SIP values

ebalmon — Tue, 23 May 2023 14:37:40 GMT

Thanks for your help. My client is valorating the proposal.

Best regards

Re: SK33760 - How to change SIP values

the_rock — Tue, 23 May 2023 14:41:05 GMT

Sounds good. O, by the way, I would strongly suggest they choose AUTOMATIC option and here is reason why. Its because that way, gateway calculates automatically how to distribute amout of connections based on memory/cpu allocated and the resources, rather than when its set manually, as I had seen cases where people give way more connections than whats needed and that can certainly have negative impact on the performance.

Some commands to check this (from my lab)

[Expert@quantum-firewall:0]# fw tab -t connections -s
HOST NAME ID #VALS #PEAK #SLINKS
localhost connections 8158 40 481 55
[Expert@quantum-firewall:0]# fw ctl multik print_heavy_conn
[Expert@quantum-firewall:0]# fw ctl pstat

Virtual System Capacity Summary:
Physical memory used: 20% (3854 MB out of 18581 MB) - below watermark
Kernel memory used: 3% (650 MB out of 18581 MB) - below watermark
Virtual memory used: 17% (3158 MB out of 18581 MB) - below watermark
Used: 3158 MB by FW, 1152 MB by zeco
Concurrent Connections: 23 (Unlimited)
Aggressive Aging is enabled, not active

Kernel memory (kmem) statistics:
Total memory bytes used: 2283715237 peak: 4000157343
Allocations: 846397085 alloc, 0 failed alloc
754610695 free, 0 failed free

Cookies:
12822991 total, 0 alloc, 0 free,
135376 dup, 24517708 get, 6642283 put,
30630748 len, 16781497 cached len, 0 chain alloc,
0 chain free

Connections:
919962 total, 152859 TCP, 213925 UDP, 549132 ICMP,
4046 other, 0 anticipated, 1 recovered, 23 concurrent,
1135 peak concurrent

Fragments:
18 fragments, 9 packets, 0 expired, 0 short,
0 large, 0 duplicates, 0 failures

NAT:
1136860/0 forw, 1456731/0 bckw, 3405335 tcpudp,
1878 icmp, 330875-231282 alloc

Sync: Run "cphaprob syncstat" for cluster sync statistics.

[Expert@quantum-firewall:0]#

Hope those help.

Cheers,

Andy

Re: SK33760 - How to change SIP values

the_rock — Tue, 23 May 2023 14:43:09 GMT

You can also have them run cpview and tab between different fields to see whats used currently (can also check history by running cpview -t and then pressing letter t to chose time frame)

Its sort of similar to BIOS options on windows.

Andy

Re: SK33760 - How to change SIP values

PhoneBoy — Tue, 23 May 2023 19:54:01 GMT

As part of the migration to the new SupportCenter, SKs marked "old" were not migrated.
The old SupportCenter is still available and the SK can be viewed here: https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk33760

If you find this SK to be helpful, I recommend leaving feedback on the SK so it can be re-evaluated and brought forward to the new SupportCenter.

Re: SK33760 - How to change SIP values

the_rock — Tue, 23 May 2023 20:16:50 GMT

Good to know!

Re: SK33760 - How to change SIP values

ebalmon — Wed, 24 May 2023 06:21:06 GMT

Thanks a lot!!