About mgothers

Ok, that does make sense.  So if I am seeing those few objects in the FW config, then those are resident on the FW...not in the Panorama Templates/DGs and i may run into issues ?   Can anyone speak about the "ghost" objects I'm seeing?     Thank you, -Matt ... View more

Do you need help configuring Minemeld or just the MS API URLs to get to the IPv4/v6 and URL lists?   ... View more

on 7.121 I'm getting consistant URL access error...It is https, and I can ping the host from the CLI, not sure why I'm getting this. ... View more

So this is a show session info from the day we had a bad user experience with traffic through the 5050 (I got a techsupport in the afternoon and i'm getting this feom running a show session info). When you look below you'll see the packet rates as follows: dp0: Packet rate:                                     156524/s dp1:  Packet rate:                                     104086/s     > show session info   target-dp:                                       *.dp0 -------------------------------------------------------------------------------- Number of sessions supported:                    2000000 Number of active sessions:                       366705 Number of active TCP sessions:                   316663 Number of active UDP sessions:                   44861 Number of active ICMP sessions:                  1211 Number of active BCAST sessions:                 0 Number of active MCAST sessions:                 0 Number of active predict sessions:               107 Session table utilization:                       18% Number of sessions created since bootup:         15035965 Packet rate:                                     156524/s Throughput:                                      900459 kbps New connection establish rate:                   3746 cps -------------------------------------------------------------------------------- Session timeout   TCP default timeout:                           3600 secs   TCP session timeout before SYN-ACK received:      5 secs   TCP session timeout before 3-way handshaking:    10 secs   TCP half-closed session timeout:                120 secs   TCP session timeout in TIME_WAIT:                15 secs   TCP session timeout for unverified RST:          30 secs   UDP default timeout:                             30 secs   ICMP default timeout:                             6 secs   other IP default timeout:                        30 secs   Captive Portal session timeout:                  30 secs   Session timeout in discard state:     TCP: 90 secs, UDP: 60 secs, other IP protocols: 60 secs -------------------------------------------------------------------------------- Session accelerated aging:                       True   Accelerated aging threshold:                   80% of utilization   Scaling factor:                                2 X -------------------------------------------------------------------------------- Session setup   TCP - reject non-SYN first packet:             True   Hardware session offloading:                   True   IPv6 firewalling:                              True   Strict TCP/IP checksum:                        True   ICMP Unreachable Packet Rate:                  200 pps -------------------------------------------------------------------------------- Application trickling scan parameters:   Timeout to determine application trickling:    10 secs   Resource utilization threshold to start scan:  80%   Scan scaling factor over regular aging:        8 -------------------------------------------------------------------------------- Session behavior when resource limit is reached: drop -------------------------------------------------------------------------------- Pcap token bucket rate                         : 10485760 -------------------------------------------------------------------------------- Max pending queued mcast packets per session   : 0 -------------------------------------------------------------------------------- Processing CPU:                                  random Broadcast first packet:                          no --------------------------------------------------------------------------------   > show session info   target-dp:                                       *.dp1 -------------------------------------------------------------------------------- Number of sessions supported:                    1500000 Number of active sessions:                       262047 Number of active TCP sessions:                   225463 Number of active UDP sessions:                   30879 Number of active ICMP sessions:                  0 Number of active BCAST sessions:                 0 Number of active MCAST sessions:                 0 Number of active predict sessions:               0 Session table utilization:                       17% Number of sessions created since bootup:         9866306 Packet rate:                                     96276/s Throughput:                                      402743 kbps New connection establish rate:                   2458 cps -------------------------------------------------------------------------------- Session timeout   TCP default timeout:                           3600 secs   TCP session timeout before SYN-ACK received:      5 secs   TCP session timeout before 3-way handshaking:    10 secs   TCP half-closed session timeout:                120 secs   TCP session timeout in TIME_WAIT:                15 secs   TCP session timeout for unverified RST:          30 secs   UDP default timeout:                             30 secs   ICMP default timeout:                             6 secs   other IP default timeout:                        30 secs   Captive Portal session timeout:                  30 secs   Session timeout in discard state:     TCP: 90 secs, UDP: 60 secs, other IP protocols: 60 secs -------------------------------------------------------------------------------- Session accelerated aging:                       True   Accelerated aging threshold:                   80% of utilization   Scaling factor:                                2 X -------------------------------------------------------------------------------- Session setup   TCP - reject non-SYN first packet:             True   Hardware session offloading:                   True   IPv6 firewalling:                              True   Strict TCP/IP checksum:                        True   ICMP Unreachable Packet Rate:                  200 pps -------------------------------------------------------------------------------- Application trickling scan parameters:   Timeout to determine application trickling:    10 secs   Resource utilization threshold to start scan:  80%   Scan scaling factor over regular aging:        8 -------------------------------------------------------------------------------- Session behavior when resource limit is reached: drop -------------------------------------------------------------------------------- Pcap token bucket rate                         : 10485760 -------------------------------------------------------------------------------- Max pending queued mcast packets per session   : 0 -------------------------------------------------------------------------------- Processing CPU:                                  random Broadcast first packet:                          no --------------------------------------------------------------------------------   > show session info   target-dp:                                       *.dp1 -------------------------------------------------------------------------------- Number of sessions supported:                    1500000 Number of active sessions:                       262764 Number of active TCP sessions:                   225911 Number of active UDP sessions:                   30971 Number of active ICMP sessions:                  0 Number of active BCAST sessions:                 0 Number of active MCAST sessions:                 0 Number of active predict sessions:               0 Session table utilization:                       17% Number of sessions created since bootup:         9867023 Packet rate:                                     104086/s Throughput:                                      426690 kbps New connection establish rate:                   2344 cps -------------------------------------------------------------------------------- Session timeout   TCP default timeout:                           3600 secs   TCP session timeout before SYN-ACK received:      5 secs   TCP session timeout before 3-way handshaking:    10 secs   TCP half-closed session timeout:                120 secs   TCP session timeout in TIME_WAIT:                15 secs   TCP session timeout for unverified RST:          30 secs   UDP default timeout:                             30 secs   ICMP default timeout:                             6 secs   other IP default timeout:                        30 secs   Captive Portal session timeout:                  30 secs   Session timeout in discard state:     TCP: 90 secs, UDP: 60 secs, other IP protocols: 60 secs -------------------------------------------------------------------------------- Session accelerated aging:                       True   Accelerated aging threshold:                   80% of utilization   Scaling factor:                                2 X -------------------------------------------------------------------------------- Session setup   TCP - reject non-SYN first packet:             True   Hardware session offloading:                   True   IPv6 firewalling:                              True   Strict TCP/IP checksum:                        True   ICMP Unreachable Packet Rate:                  200 pps -------------------------------------------------------------------------------- Application trickling scan parameters:   Timeout to determine application trickling:    10 secs   Resource utilization threshold to start scan:  80%   Scan scaling factor over regular aging:        8 -------------------------------------------------------------------------------- Session behavior when resource limit is reached: drop -------------------------------------------------------------------------------- Pcap token bucket rate                         : 10485760 -------------------------------------------------------------------------------- Max pending queued mcast packets per session   : 0 -------------------------------------------------------------------------------- Processing CPU:                                  random Broadcast first packet:                          no --------------------------------------------------------------------------------   ... View more

I'm curious you point to the packet rate...that doesn't seem to high for a 5050, I was under the impression that they can handle upto 2,000,000 p/s ?? I'm having a 5050 that has been very taxed and with only App-ID being used to taxt the Gbps it was choking with well under the advertised 10Gps. -Matt ... View more