NSS Solutions

• The fwauth.NDB file gets corrupted and causes the FWD process to fail.

fwd.elg file has the error “Cannot load objects database ndb_open: database ‘magic number’ corrupted(/opt/CPsuite-R60/fw1/database/fwauth.NDB) Users Database is lost: unable to reload”

Having seen this error occur more than once over the past year, I thought it was important to bring up for any large enterprise customers.

The short of it is if you have a very high traffic load corruption can occur in the fwauth.NDB.

Check Point does have a customer hotfix for R65 HFA_50, but the true fix is HFA_70 on R65.

My recommendation would be to HFA_70 for R65.

Side note, this did occur in R60 as well.  There is a custom hotfix that did fix the issue that is not longer available.  You will need to upgrade to R65 if you have this problem on R60.

There is a memory leak in R65 and R70 with the cpd process.  When a firewall is queried the memory leak occurs when cpd responds to that query.

This has been fixed in HFA_60 for those of you running R65.  There is no fix out yet for anyone running R70.

If you are upgrading to R70 from R65 and have installed at least two of the following HFA’s to R65 you may have server stability issues

HFA 30
HFA 40
HFA 50

To avoid issues before upgrading run

rm -f /opt/CPsuite-R65/fw1/PA/conf/PA/PA

If you are doing an upgrade_export run the command before preforming the upgrade_export

Note if you are installing from scratch this isn’t a problem.