We recently installed a SonicWALL NSA 2400 at our corporate location. This device has locked up twice and has also maxed out its cores once. It's been in for a week.
From the research that I've been able to do, it seems like these issues are probably stemming from too many connections open. This is somewhat strange because during the day, I'm seeing the connections maxing out at less than 5,000. The limit is 32,000. The last time it locked up was at about midnight last night when no one should have been on the system.
My plan of attack is two-fold. I am setting up ViewPoint so I can monitor the traffic a bit closer but I would also like to configure email alerts when the number of connections hit a certain threshold or the cores hit a certain percent threshold. Is anyone doing this? I'm not sure what software/approach is the best way to go.
Any help would be appreciated.