Are there any other universities out there using SEF? We are experiencing almost daily http traffic stopping. The only resolution has been to reboot the firewall machine. Could it be http tunnelling software? Symantec hasn't been much help. ("Read your log files" and they don't show a problem) Would like to visit with any universities who have 6,000 to 10,000 users. Currently running 6.50 on NT, have also tried 6.52 on W2K with same results.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
HTTP failure on University
- Thread starter kmills
- Start date
It takes a little more information than you've posted here.
Check out do a search on the archives for httpd stopping. Look at cpu usage/port usage, any messages in logs relating to kernel memory, port already in use etc
Check out do a search on the archives for httpd stopping. Look at cpu usage/port usage, any messages in logs relating to kernel memory, port already in use etc
We have had a problem with our SEF 6.5.x regarding the number of ports used on the FW.
TCP/IP default is basicly to use any ports from 1024 or up, but by default I think windows has a max around 5000 so the problem you have could be that you run out of portnumbers for your http traffic.
There is a document that tells how to change this. It's done by using regedt32 (or regedit) but I don't remember the setting
If your installation is big also remember to kill inactive tcp/ip connections after some time because you could end up with the same type of problem anyway. The port problem is common in all big installation if they only have one fw to the internet regardless of product. I have seen this on Checkpoint too.
TCP/IP default is basicly to use any ports from 1024 or up, but by default I think windows has a max around 5000 so the problem you have could be that you run out of portnumbers for your http traffic.
There is a document that tells how to change this. It's done by using regedt32 (or regedit) but I don't remember the setting
If your installation is big also remember to kill inactive tcp/ip connections after some time because you could end up with the same type of problem anyway. The port problem is common in all big installation if they only have one fw to the internet regardless of product. I have seen this on Checkpoint too.
- Status
Similar threads
- Locked
- Question
- Locked
- Question
- Locked
- Question