AnsweredAssumed Answered

Virtual FIrewalls running R80.10 take 154 Hangs

Question asked by Tom Stala on Dec 26, 2018
Latest reply on Jan 14, 2019 by Tom Stala

Virtual FIrewalls running R80.10 take 154

We are having issues with the firewall where we need to run zdebug drop to see traffic is actually being dropped.


it seems like when we run these commands the firewall becomes unresponsive

fw ctl debug 0

fw ctl debug -buf 32000 -v 4


we can run top or cpstop 

we can look at directories


but cpview, cpinfo do not work.


Nothing looks like it is stuck at 100% under TOP

The boxes are 15600's and they are hardly even breathing. 


There are no crash or dump files created.

even fw monitor will not show anything. But anything that should be passing is not able to pass anymore.


we issue a cpstop and the firewall jumps over to one of the other two VM's and everything starts to work.


We have even had this on a trouble call with checkpoint tech running the commands, there is just no way to get any information from the failing firewall.


I guess we are wondering if anyone else has had this issue.


Yes we do have tickets open