- Products
- Learn
- Local User Groups
- Partners
- More
Maestro Masters
Round Table session with Maestro experts
Hi Expert,
We are setting new Maestro with 140 * 2 and SG6600*3. When we performed "asg diag verify" command, there are always two failed item.
One is Software Provision and the other is Performance hogs failed. Will this two failed item affect Maestro running and performance ?
We are running R81.10 JHF take 30.
+-------------------------------------------------------------------------------------------------------+
|Installed Hotfixes |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|Package |Name |Take |Result |Comments |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|CPUpdates |BUNDLE_CPSDC_AUTOUPDATE |19 |Failed |1_01: Not exists |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|CPUpdates |BUNDLE_GOT_TPCONF_AUTOUPDATE |97 |Failed |1_01: Not exists |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|CPUpdates |BUNDLE_HCP_AUTOUPDATE |48 |Failed |1_01: Not exists |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|CPUpdates |BUNDLE_PUBLIC_CLOUD_CA_BUNDLE_AUTOU|14 |Failed |1_01: Not exists |
| |PDATE | | | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|CPUpdates |BUNDLE_R81_10_JUMBO_HF_MAIN |30 |Pass | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|CVPN |HOTFIX_R81_10_JUMBO_HF_MAIN |30 |Pass | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|FW1 |HOTFIX_GOT_TPCONF_AUTOUPDATE |- |Failed |1_01: Not exists |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|FW1 |HOTFIX_PUBLIC_CLOUD_CA_BUNDLE_AUTOU|- |Failed |1_01: Not exists |
| |PDATE | | | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|FW1 |HOTFIX_R81_10_JUMBO_HF_MAIN |30 |Pass | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|PPACK |HOTFIX_R81_10_JUMBO_HF_MAIN |30 |Pass | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|SMO |HOTFIX_R81_10_JUMBO_HF_MAIN |30 |Pass | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|SecurePlatform |HOTFIX_R81_10_JUMBO_HF_MAIN |30 |Pass | |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|cpsdc_wrapper |HOTFIX_CPSDC_AUTOUPDATE |- |Failed |1_01: Not exists |
+--------------------+-----------------------------------+---------------+---------+--------------------+
|hcp_wrapper |HOTFIX_HCP_AUTOUPDATE |- |Failed |1_01: Not exists |
+--------------------+-----------------------------------+---------------+---------+--------------------+
Summary
=======
1. Software verifier passed successfully.
2. Module verifier passed successfully.
3. Hotfix verifier failed.
==============================
Performance hogs:
==============================
-----------------------------------------------------------------
| Status | Test performed |
-----------------------------------------------------------------
| [FAILED] | Disabled Accept Templates |
| [FAILED] | Disabled NAT Templates |
| [PASSED] | FW1 debug flags |
| [PASSED] | Kernel soft lockups |
| [PASSED] | Long running processes |
| [PASSED] | Neighbour table overflow |
| [PASSED] | PPACK debug flags |
| [PASSED] | Routing cache entries |
| [PASSED] | SecureXL status |
| [PASSED] | Swap saturation |
| [PASSED] | routed trace options |
-----------------------------------------------------------------
Found the following issues:
-----------------------------------------------------------------
[ All] Accept Templates : disabled by Firewall; Layer Network disables template offloads from rule #697; Throughput acceleration still enabled.
[ All] NAT Templates: disabled by Firewall; Layer Network disables template offloads from rule #697; Throughput acceleration still enabled.
Thanks!
Todd
@Anatoly can you please assist here?
We found the performance hogs was caused by one rule with NFS service group object.
Removing some RPC NFS related objects from the rule service and re-run diag verify. All performance hogs test are PASSED. 🙂
We also created a TAC for Software Provision failed which is currently under investigation.
Thu 30 Jun 2022 @ 09:00 AM (PDT)
CheckMates Live West US: Troubleshooting Quantum MaestroAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY