We recently upgraded from R80.40 to R81 and are still experiencing some issues. Here's our environment information:
- Cluster of two 5800 appliances running VSX
- A total of 10 vs systems
- Upgrade from R80.40 old kernel to R81 new kernel (3.10). Had to run a fresh install, vsx util upgrade, vsx util reconfigure
After upgrade was completed over the weekend, noticed on Monday internet traffic gradually slowing down until it totally stopped. After thorough analysis with the checkpoint professional services, we disabled securexl on the vs handling traffic out to the internet and that fixed the problem. Tried enabling securexl after increasing ws_max_sessions_per_conn and ws_max_timestamped_sessions_per_conn params but still experienced the same problem. Also noticed we are not able to run the cipher_util command. It comes back with a "Cannot access features configuration directory" message.
Without securexl on we are experiencing higher than usual cpu usage than normal on our perimeter web traffic gateway and cannot enable disable ciphers not being able to issue the ciphers_util command.
- Can't run acceleration on web gateway traffic which hinders cpu usage
- Can't run ciphers_util command
I have created tickets with the TAC for each of these problems.
Want to know if anyone has experience similar issues.