topic Re: High CPU utilization during process fwk7_dev_0 in Firewall and Security Management

High CPU utilization during process fwk7_dev_0

Arturxr — Mon, 18 Jul 2022 08:41:13 GMT

We have the output of the top 265% cpu command on the fwk7_dev_0 process, CheckPoint VSX version 80.40, the output of the cpprod_utel FwIsUsermode command shows "1" after reading: https://community.checkpoint.com/t5/General-Topics/High-CPU-utilization-during-process-fwk0-dev-0-UMFW-vs-KMFW/td-p/70648

https://community.checkpoint.com/t5/General-Topics/R80-x-Performance-Tuning-Tip-User-Mode-Firewall-vs-Kernel-Mode/m-p/70759/highlight/true#M14330

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167052

any questions, can I switch the firewall to kernel mode on my checkpoint?

Re: High CPU utilization during process fwk7_dev_0

Oliver_Fink — Mon, 18 Jul 2022 09:26:32 GMT

As far as I understand the concept, VSX runs in user mode only.

The process running with more than 100 % is quite normal. You have to assign enough cores to this VS to handle this amount of CPU usage. With 265 % this VS needs a minimum(!) of 3 cores assigned in SmartConsole to handle this traffic correctly. I personally, would assign much more to have some CPU in reserve.

Re: High CPU utilization during process fwk7_dev_0

Arturxr — Mon, 18 Jul 2022 09:54:00 GMT

tell me how to do it in smart console?

Re: High CPU utilization during process fwk7_dev_0

JanVC — Mon, 18 Jul 2022 13:53:36 GMT

the VS already has at least 3 cores assigned, otherwise it wouldn't be able to reach 265%

in top press shift + h to split the fwk_dev process into individual processes

increasing the core count for a vs is done on the vs object properties in the smartconsole (watch out for downtime when changing this)

Re: High CPU utilization during process fwk7_dev_0

PhoneBoy — Mon, 18 Jul 2022 17:37:23 GMT

The explicit settings for UserMode only apply in a non-VSX setting.
VSX only operates in UserMode.

Re: High CPU utilization during process fwk7_dev_0

Oliver_Fink — Mon, 18 Jul 2022 18:15:28 GMT

You are right. I just wanted to address that 265 is not a malfunction, but has to be seen in correlation to the assigned cores of the VS.

Re: High CPU utilization during process fwk7_dev_0

Oliver_Fink — Mon, 18 Jul 2022 18:20:28 GMT

Select the VS in SmartConsole, select CoreXL from the menu and assign the cores for IPv4 (and IPv6 if needed). Please notice the informational remark that changing the number of cores will result in a downtime of the corresponding VS! Consider in maintenance window for that change.