topic Re: Cores on CheckPoint VM are not effective in Firewall and Security Management

Cores on CheckPoint VM are not effective

Sysprog_Alexey — Mon, 08 Sep 2025 18:38:40 GMT

Hello!

I found out today such configuration on my virtual CheckPoint:

[Expert@CheckPoint:0]# fw ctl affinity -l -r
CPU 0: eth1 eth0 eth2 eth3 eth4 eth5
fw_0 (active)fw_1 (active)fw_2 (active)fw_3 (active)fw_4fw_5
cprid lpd watermark_cp_file_convertd mpdaemon fwd in.asessiond core_uploader cp_file_convertd vpnd rad in.acapd usrchkd pepd scrubd pdpd rtmd wsdnsd scrub_cp_file_convertd cprid cpd msgd
CPU 1:
CPU 2:
CPU 3:
CPU 4:
CPU 5:
CPU 6:
CPU 7:
All:eth6

cpview also shows something strange... Have anyone ideas, how to overcome this...?

Re: Cores on CheckPoint VM are not effective

Bob_Zimmerman — Mon, 08 Sep 2025 19:34:36 GMT

It looks like CoreXL isn't set up. The command 'fw ctl multik stat' should tell you if it's enabled. If it isn't, you probably need to enable it in cpconfig.

Be aware any changes to CoreXL config will probably involve an outage!

Re: Cores on CheckPoint VM are not effective

the_rock — Mon, 08 Sep 2025 19:54:21 GMT

I see the point Bob is making. I ran this in my lab and shows bunch of stuff.

Andy

Re: Cores on CheckPoint VM are not effective

Chris_Atkinson — Mon, 08 Sep 2025 23:21:45 GMT

Agree with @Bob_Zimmerman

How was this built?

What's the underlying platform, GAiA OS version and license used?

Re: Cores on CheckPoint VM are not effective

Sysprog_Alexey — Tue, 09 Sep 2025 03:14:21 GMT

This is lab environment, so i use EVAL licenses. Virtual Machine has 8 cores.

Today i rebooted the VM and saw this:

[Expert@CheckPoint:0]# fw ctl multik stat
ID | Active | CPU | Connections | Peak
-----------------------------------------------
0 | Yes | 7 | 798 | 808
1 | Yes | 6 | 800 | 825
2 | Yes | 5 | 798 | 815
3 | Yes | 4 | 769 | 776
4 | Yes | 3 | 793 | 803
5 | Yes | 2 | 801 | 807

cpview also changed (see screenshot):

Thanks for help! Is there a way to gave a "role" to a core with type "OTHER"?

Re: Cores on CheckPoint VM are not effective

Chris_Atkinson — Tue, 09 Sep 2025 07:19:38 GMT

Please see: https://support.checkpoint.com/results/sk/sk181241