CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SmartDefense
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-09-20
Junior Member
 
Join Date: 2006-09-20
Posts: 1
Rep Power: 0
hasso has an average reputation (10+)
Default SD protocol checking of CIFS/SMB cause failures

We've got the situation whereby large file transfers (over 3-4G) using CIFS/SMB are intermittently failing. Disabling the VSX inspection of CIFS/SMB traffic improves throughput by approximately 30% and results in consistent file copy success. The protocol capture files show no obvious reason for the copy failures. Can anyone point me in the right direction as to what the issue could be?
Reply With Quote
  #2 (permalink)  
Old 2006-10-12
Junior Member
 
Join Date: 2006-10-12
Posts: 1
Rep Power: 0
cpfanboy has an average reputation (10+)
Default Re: SD protocol checking of CIFS/SMB cause failures

For anyone mildy interested.

This problem may be specific to R55 version of VSX management.

This problem may be related to the ASM parameter asm_cifs_max_buffer

The default buffer size in older versions of smart defense's ASM configuration is 4000. A recent upgrade to R60 reveals that the default buffer value is now doubled to 8000.

Changing this value significantly improved CIFS traffic throughput and appears to eliminate CIFS instability introduced by the enforcement point.

(remember to be good peons and always use guidbedit to modify these values)

a cp fanboy.
Reply With Quote
  #3 (permalink)  
Old 2006-10-13
Senior Member
 
Join Date: 2006-01-25
Posts: 926
Rep Power: 3
melipla has an average reputation (10+)
Default Re: SD protocol checking of CIFS/SMB cause failures

Quote:
Originally Posted by cpfanboy View Post
(remember to be good peons and always use guidbedit to modify these values)
There's an incorrect way to modify these values?
__________________
Its all in the documentation.
Reply With Quote
  #4 (permalink)  
Old 2006-10-13
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,670
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: SD protocol checking of CIFS/SMB cause failures

Quote:
Originally Posted by melipla View Post
There's an incorrect way to modify these values?
vi $FWDIR/conf/objects.c_5_0
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 11:16.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0