We have been running a webinar for a while now that discusses the top configuration-related mistakes we see people making with Check Point firewalls. Some of the sessions I ran myself! Since many attendees asked for a document detailing the tips, we thought we’d make it available here. Top checks to run regularly on your […]

This is a real life sample alert from indeni for F5 Balancing Methods Description: You have applied a hash persistence profile to a FastL4 virtual server. That is not supported. The following appeared in /var/log/tmm: local/Test1 notice mcp error: 1031000 in mcpmsg_to_database Manual Remediation Steps: Follow the workaround detailed in SOL12078. How does this alert […]

This is a real life sample alert from indeni. Description: The firewall kernel memory usage has crossed the high threshold. It is now at 80.0%. Manual Remediation Steps: On open servers, you can install more memory. However, the maximum amount of memory that can be used by the kernel is 2 GB. You can decrease […]

The firewall market has been on fire (no pun intended) for several years now. The latest security incidents and the need for better solutions have resulted in innovation coming from most of the large firewall vendors. It also resulted in a startup, that just until a few years ago was considered a new entrant and […]

This is a real life sample alert from indeni for F5 Load Balancing Methods Description: According to F5’s SOL14455, SFP NICs on this OS version may cause a broadcast / multicast loop. Manual Remediation Steps: Review your settings to determine if this is an actual issue on your system. Please read SOL14455. How does this […]

This is a real life sample alert from indeni. Description: The Tx queue batch size on this device is: 1. A too high Tx queue batch size may increase latency. This can be a severe issue for applications that are sensitive to high latency. Manual Remediation Steps: For more information on this issue please review […]

This is a real life sample alert from indeni. The alert applies to Check Point firewalls, F5 Load Balancers, and any other Unix-based device. Description: Some file systems have reached a high usage of inodes. To learn more about inodes, please read the Wikipedia entry. SOL12263 also has a reference to this (for F5©). Affected File […]

Google released something today – a tool called The Customer Journey to Online Purchase. While this just a standalone tool at the moment, I’m sure we’ll witness parts of its capabilities integrated into Google Analytics at some point in the near future. This release, together a few more startups dotting the landscape (like RelateIQ, as described […]

This is a real life sample alert from indeni Description: This device is part of an Active-Active HA configuration without an additional standby device. This is contrary to F5’s recommendations on the matter. Manual Remediation Steps: Add a standby member to the HA group. How does this alert work? indeni automatically determines when certain devices […]

This is a real life sample alert from the Indeni Check Point Firewall Configuration Alert Guide. Description: Indeni has identified that some of the on-board NICs of this open server are being used. Traffic on these on-board NICs may be unstable and some packets may be dropped or experience errors. Review the list of NICs […]

This is a real life sample alert from indeni. Description: Having one or more NICs assigned to the same CPU core as an fw_worker will result in degraded performance. Affected Cores: Core 0 is assigned to both eth1 and fw_0 Manual Remediation Steps: Update the affinity of cores. Follow the CoreXL documentation. How does this […]

This is a real life sample alert from indeni for F5 Load Balancing Methods Description: The DNS::question iRule command may return an incorrect value. This issue occurs when all of the following conditions are met: * An iRule for an LTM DNS event runs the DNS::question command, the iRule then runs a command that suspends […]