https://community.checkpoint.com/t5/SASE-and-Remote-Access/Maestro-VSX-and-SSLVPN/m-p/150059#M6671 <P>Hi Mates,</P><P>So basically I just want to point something (and&nbsp; maybe someone can explain what happened).</P><P>I have a VSX setup for a SSL portal and a bunch of users using SNX. Sometimes (it took me and tac 2 weeks to find why) SNX failed with 201 authentication error.</P><P>Long story short, after some very good engineers (all my respect for them) joined a live session they've figured out that in VSX the default table space for&nbsp; http_vpnd_cookies is 400! which was way to low for the number of users.</P><P>The <STRONG>max_concurrent_vpn_tunnels </STRONG>value in guiDBEdit is 200&nbsp; which on a normal gateway is 12500.&nbsp; (they are somehow x2).</P><P><BR />My question is&nbsp; how come a humble gateway comes with 25000 and a VS with 400. How come, by default , a VS is capped at 15000 session when a SGM can support millions.&nbsp; Is there any ration for that ?</P><P>&nbsp;</P><P>Basically I had 2 weeks of daily full outages, an angry client and a penalty fee for not being able to do this implementation on-time.</P> Thu, 02 Jun 2022 20:27:28 GMT melkool 2022-06-02T20:27:28Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Maestro-VSX-and-SSLVPN/m-p/150059#M6671 <P>Hi Mates,</P><P>So basically I just want to point something (and&nbsp; maybe someone can explain what happened).</P><P>I have a VSX setup for a SSL portal and a bunch of users using SNX. Sometimes (it took me and tac 2 weeks to find why) SNX failed with 201 authentication error.</P><P>Long story short, after some very good engineers (all my respect for them) joined a live session they've figured out that in VSX the default table space for&nbsp; http_vpnd_cookies is 400! which was way to low for the number of users.</P><P>The <STRONG>max_concurrent_vpn_tunnels </STRONG>value in guiDBEdit is 200&nbsp; which on a normal gateway is 12500.&nbsp; (they are somehow x2).</P><P><BR />My question is&nbsp; how come a humble gateway comes with 25000 and a VS with 400. How come, by default , a VS is capped at 15000 session when a SGM can support millions.&nbsp; Is there any ration for that ?</P><P>&nbsp;</P><P>Basically I had 2 weeks of daily full outages, an angry client and a penalty fee for not being able to do this implementation on-time.</P> Thu, 02 Jun 2022 20:27:28 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Maestro-VSX-and-SSLVPN/m-p/150059#M6671 melkool 2022-06-02T20:27:28Z