Perfect & Stable Hardware for R65

[cpsundar]

Hi All,

Can you all share your thoughts on the best stable and perfect hardware proven and tested for R65. I am looking to install VPN-1 with cluster XL Active/Active for one of our clients and would consider one of the following vendors

1. IBM.
2. HP.
3. Dell.

Regards
CPS

[chillyjim]

Of that list the IBM 3650 is your best bet. It is the hardware that the Firefly Integrated Appliance is based off of. That said, you will do better price wise going with the IAS itself instead of trying to build one.

[melipla]

I've had problems with newer Dells (vIII) and splat 2.6.

[Thorpuse]

Can you be a little more specific about the issues?

[melipla]

Originally Posted by Thorpuse

Can you be a little more specific about the issues?

CPD / VPND / in.assessiond consuming 100% of a CPU. When CPD is at 100% it breaks SIC. When VPND debugging is enabled, vpn traffic may stop routing altogether. Can't enable RTM or the problem is very consistent.

[cciesec2006]

All the issues mentioned by Melipla are confirmed by Checkpoint TAC. No
ETA on resolution.

[Thorpuse]

Thanks for this - I think I'm starting to see some of these issues, but I can't see anything documented in SK or release notes. It's good to know what to look for - can you keep us posted about TAC updates on this?

[Pascal]

We still have an issue with HP DL585G2

- CCP multicast mode (HA)
- And some ping issue which we don't have with R61

Regards
Pascal