topic Instance is currently fully utilized, the number of dropped packets in Firewall and Security Management

Instance is currently fully utilized, the number of dropped packets

Rajur — Tue, 01 Apr 2025 13:04:17 GMT

Hi guys,

can you please help me understand what is exactly behind this alert we get from our Zabbix monitoring system? How it affects production flows?

Check Point Firewall: Instance is currently fully utilized.
This trigger uses the number of dropped packets, an increase of which indicates that the instance is fully utilized.

https://www.zabbix.com/integrations/checkpoint

See screenshots.

Is it dropping on interface or system level? CPU is not utilized during this alerts, so we are trying to understand what is wrong.

Appreciate your help

FW1 build number:
This is Check Point's software version R81.20 - Build 043
kernel: R81.20 - Build 050
[SecurePlatform]
HOTFIX_R81_20_JUMBO_HF_MAIN Take: 92

Re: Instance is currently fully utilized, the number of dropped packets

Nüüül — Tue, 01 Apr 2025 13:13:23 GMT

According to

Check Point Firewall: Utilized drops number per second{#SINGLETON} MIB: CHECKPOINT-MIB Number of dropped packets per second due to instance being fully utilized. SNMP agent fw.utilized.drops[fwFullyUtilizedDrops.{#SNMPINDEX}] Preprocessing Change per second

Yes, packets are dropped.

see:

https://community.checkpoint.com/t5/Management/What-exactly-does-quot-Instance-is-currently-fully-utilized-quot/td-p/73653

Re: Instance is currently fully utilized, the number of dropped packets

Rajur — Tue, 01 Apr 2025 13:51:48 GMT

Thank you!