RE: [FW1] Firewall 1 Logs

["Christian, Brian S." <brian.christian@unisys.com>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]


Randy,
 
    In the FW log viewer, go to the "Select" tab, choose "options" and under
the "Resolving" section turn off "Resolve Addresses." This will turn off
resolution of source and destination addresses and should show you remarked
improvement in the speed in which the FW log performs and cut down on the
overhead of the FW1 server itself. Just turn it back on when you need to
know the resolved source or destination address.
 
 
Good Luck,
 
 
Brian Christian
Network Engineer, Unisys Corp.

-----Original Message-----
From: Randy Wilson [mailto:RWilson@RBMG.com]
Sent: Friday, April 16, 1999 6:55 AM
To: 'fw-1-mailinglist@lists.us.checkpoint.com'
Cc: Scott Hyjek
Subject: [FW1] Firewall 1 Logs




    I recently implemented Firewall-1 in our company. We are using two
Compaq 1850R servers in a master and secondary configuration. I have patched
fw1with the latest patch. We are running fw1 on the Windows NT4.0 platform
with a service pack level of 4.0 and all relevant hot fixes applied. I have
a policy of moving the fw1 logs off the sever once a month and purging them.
My problem is anytime I try to view the logs they are slow and sometimes
seem to max out the processor on the master fw1 server forcing us to reboot.
What should I do ? The problem is seems to be consistent.



  Randy Wilson 
        RBMG 
Network Engineering 
     803.741.3353 



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================