Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 551 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL connection loss when saving configuration

BJessop
I am using the gateway (Astaro ASG425) for a large number of point to point SSL connections. When configuring a new remote conection, when I save it I lose connection to all the remote stations for a short time. Is there any way around this, as it keeps taking down a live system?
Thanks in anticipation


This thread was automatically locked due to age.
Parents
  • 0
    I didn't think a 425 would handle that many SSL tunnels: normally, it's only recommended to put 100 on a 425.  With that many tunnels, I would think you'd have more luck with "AES-128 PFS" encrypted IPsec tunnels; a 425 should handle 600 such tunnels.

    When you next do this, please have top running on a command line session so you can see if something suddenly takes all of the available CPU.  Note precisely what you did that caused the existing tunnels to die, and whether they all died. Also, check the SSL VPN, Selfmonitoring and System messages log afterwards.

    Please keep us apprised of your progress.

    Cheers - Bob
Reply
  • 0
    I didn't think a 425 would handle that many SSL tunnels: normally, it's only recommended to put 100 on a 425.  With that many tunnels, I would think you'd have more luck with "AES-128 PFS" encrypted IPsec tunnels; a 425 should handle 600 such tunnels.

    When you next do this, please have top running on a command line session so you can see if something suddenly takes all of the available CPU.  Note precisely what you did that caused the existing tunnels to die, and whether they all died. Also, check the SSL VPN, Selfmonitoring and System messages log afterwards.

    Please keep us apprised of your progress.

    Cheers - Bob
Children
No Data