topic Checkpoint mgmt server random high cpu in Firewall and Security Management

Checkpoint mgmt server random high cpu

rajeshpk1900 — Fri, 18 Dec 2020 05:33:35 GMT

Hi All,

I have Checkpoint mgmt. server R80.30 take 214 which manages multiple firewals.

I can see that whenever I policy verification for some firewalls, the management server cpu utilization is going high.

Could someone let me know is this a normal behavior and if so, is there any document for the same.

Please be noted that I am not installing any policies during the time, but only verification is being done.

cpstat -f multi_cpu os > show 16 CPUs.

Mgmt#cpstat -f cpu os

CPU User Time (%): 67

CPU System Time (%): 5

CPU Idle Time (%): 27

CPU Usage (%): 73

CPU Queue Length: -

CPU Interrupts/Sec: 2000

CPUs Number: 16

Re: Checkpoint mgmt server random high cpu

Timothy_Hall — Fri, 18 Dec 2020 14:07:42 GMT

Policy verification is performed by the multi-threaded java process cpm in R80+, so this is expected behavior; java will attempt to use as many available resources as possible to finish its operation expediently. Would you prefer that it use less CPU and the verification takes much longer? 😀

Most elements of policy compilation are still performed by the single-threaded fwm process, which can only use one CPU at a time so overall CPU usage will look lower during this phase of gateway policy installation.

Re: Checkpoint mgmt server random high cpu

rajeshpk1900 — Sat, 19 Dec 2020 17:33:58 GMT

Thanks for the update...It was of great help