Capacity Optimization We currently have a problem with our firewall having to be reset every few hours - while awaiting an engineer we have looked at the logs and have increased capacity optimization to 50000 from 25000 this seems to help as it lasted about 5 hours instead of 2. 1 Are there any issues we should be aware of when we try this ? 2. Cant see anything else we can do - We are looking at recently installed rules etc ..... This is what we saw on the logs - FW-1: WARNING: The connections table is 80% full. Sep 6 13:03:42 CRUK-1 [LOG_CRIT] kernel: New connections will be dropped once the connection table reaches Sep 6 13:03:42 CRUK-1 [LOG_CRIT] kernel: full capacity. Please consider increasing the connections table limit. Any other ideas to increase the time between fall overs while we get a CP engineer in. |