Web Intelligence crash firewall

[ziriy]

Our firewall installed on Solaris.
Test with Version NGX R60, HFA01, HFA03, HFA04
Web server translate to external net via extarnal firewall address - static NAT.
We move static NAT to other external address - not firewall, and system start crush time to time.
We spend many time for found cause of this.
When we just turn off Web Intelligence for Web Server thats static translate - no more reboot.
So we start step by step turn on Web Intelligence protections.
Now we think reason is Malicious Code Protector...
Be cearful with use static NAT with this feature.

[chillyjim]

I would take a serious look at your hardware, epically the memory modules. WI & MCP have been around for a while and of all the problems they can cause, crashing the firewall isn't one I've ever seen.

Also make sure you have the right patch set installed for your version of Solaris.

[ziriy]

With platform all ok.
We find this problem when try move configuration from single firewall to firewall cluster. So we test this on both servers.
Yestarday as we think we find this bug.
It not worked when Malicious Code Protector configured as:Optimize speed, Optimize perfomance; we change to optimize security, optimize memory.
We test this problem with Solaris Patch cluster from september 2006 to january 2007.
This is not a sun bug. I send dump files to sun support and they say that crush system firewall process.
We catch http files thats translate to Web server, may be the same packet crush the system, but not.

[chillyjim]

This should not be happing, open a call with TAC. It's possible you've found a bug with something that's not common in your setup. If this was common, we'd hear a lot more of it, I've a lot of customers running WI on Solaris in front of large web farms.