SK33760 - How to change SIP values

[ebalmon]

Hi

I can't find it. Anyone can help me?

Best regards

 

[the_rock]

Maybe its internal sk, you can call TAC and ask. Below is what I get and I have advanced/expert access.

Andy

 

[the_rock]

Though, to add to my 1st post, Im fairly poisitive its referring to below:

 

[ebalmon]

Thanks dude! 

sorry,forgot to say that it is in Smart Console R81.10☹️

[the_rock · Accepted solution]

Makes no difference bro, that option has been there probably since last century lol. Did it work?

Andy

[ebalmon]

Thanks for your help. My client is valorating the proposal.

Best regards

[the_rock]

Sounds good. O, by the way, I would strongly suggest they choose AUTOMATIC option and here is reason why. Its because that way, gateway calculates automatically how to distribute amout of connections based on memory/cpu allocated and the resources, rather than when its set manually, as I had seen cases where people give way more connections than whats needed and that can certainly have negative impact on the performance.

Some commands to check this (from my lab)

[Expert@quantum-firewall:0]# fw tab -t connections -s
HOST NAME ID #VALS #PEAK #SLINKS
localhost connections 8158 40 481 55
[Expert@quantum-firewall:0]# fw ctl multik print_heavy_conn
[Expert@quantum-firewall:0]# fw ctl pstat

Virtual System Capacity Summary:
Physical memory used: 20% (3854 MB out of 18581 MB) - below watermark
Kernel memory used: 3% (650 MB out of 18581 MB) - below watermark
Virtual memory used: 17% (3158 MB out of 18581 MB) - below watermark
Used: 3158 MB by FW, 1152 MB by zeco
Concurrent Connections: 23 (Unlimited)
Aggressive Aging is enabled, not active

Kernel memory (kmem) statistics:
Total memory bytes used: 2283715237 peak: 4000157343
Allocations: 846397085 alloc, 0 failed alloc
754610695 free, 0 failed free

Cookies:
12822991 total, 0 alloc, 0 free,
135376 dup, 24517708 get, 6642283 put,
30630748 len, 16781497 cached len, 0 chain alloc,
0 chain free

Connections:
919962 total, 152859 TCP, 213925 UDP, 549132 ICMP,
4046 other, 0 anticipated, 1 recovered, 23 concurrent,
1135 peak concurrent

Fragments:
18 fragments, 9 packets, 0 expired, 0 short,
0 large, 0 duplicates, 0 failures

NAT:
1136860/0 forw, 1456731/0 bckw, 3405335 tcpudp,
1878 icmp, 330875-231282 alloc

Sync: Run "cphaprob syncstat" for cluster sync statistics.

[Expert@quantum-firewall:0]#

Hope those help.

Cheers,

Andy

[the_rock]

You can also have them run cpview and tab between different fields to see whats used currently (can also check history by running cpview -t and then pressing letter t to chose time frame)

Its sort of similar to BIOS options on windows.

Andy

[PhoneBoy · Accepted solution]

As part of the migration to the new SupportCenter, SKs marked "old" were not migrated.
The old SupportCenter is still available and the SK can be viewed here: https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&so... 

If you find this SK to be helpful, I recommend leaving feedback on the SK so it can be re-evaluated and brought forward to the new SupportCenter.

[the_rock]

Good to know!

[ebalmon]

Thanks a lot!!