topic Re: R80.10 Security Management Performance Tuning Guide in Firewall and Security Management

R80.10 Security Management Performance Tuning Guide

Tomer_Sole — Thu, 23 Aug 2018 09:42:30 GMT

In this guide, we explain how to select the correct hardware for an optimal experience.

We provide tips on tuning your environment for performance-intensive operations.

Finally, we help you troubleshoot performance-related problems in case they happen.

R80.10 Security Management - Performance Tuning Guide - Check Point Software Technologies

Please let us know your feedback in the comments below.

Re: R80.10 Security Management Performance Tuning Guide

Kaspars_Zibarts — Thu, 23 Aug 2018 10:32:41 GMT

Wow! One year too late in our case but still impressive! More technical comments to follow!

Re: R80.10 Security Management Performance Tuning Guide

NaderAlly — Thu, 23 Aug 2018 20:44:22 GMT

Thanks for creating this document!

Will there be a PDF version available for download?

Re: R80.10 Security Management Performance Tuning Guide

Vladimir — Fri, 24 Aug 2018 01:51:47 GMT

Thanks Tomer.

Can you tell us if the hyperthreading situation in R80.20.M1 have changed or is the old recommendation still stands?

Thank you,

Vladimir

Re: R80.10 Security Management Performance Tuning Guide

Kim_Moberg — Fri, 24 Aug 2018 04:53:46 GMT

Thank you Tomer,

This is a great piece of work when one needs to find out the right hardware specs is required to run the SMS server

Re: R80.10 Security Management Performance Tuning Guide

Pablo_Barriga — Fri, 24 Aug 2018 14:35:48 GMT

Good document, I have a question, what are the recomended guaranteed ram and i/o in a virtual enviroment, I have several customers with different flavors of private cloud, some has vmware, other hyper-v or nutanix.

Another consideration that you should make prior to deploying the Check Point management and logging software on a virtual machine, is that the Security Management Server needs guaranteed RAM at all times, and the Log Management Server needs a guaranteed I/O amount. If not, you might experience performance problems. Merely having a strong virtual machine host is not enough for placing the Check Point servers within – you must also find out who its “neighbors” are going to be and the demands they will place on the Management and Log Servers.

Re: R80.10 Security Management Performance Tuning Guide

Tomer_Sole — Sun, 26 Aug 2018 06:08:53 GMT

On the upside we integrated a lot of customer feedback an experience to this document. But we will release the R80.20 document faster.

Re: R80.10 Security Management Performance Tuning Guide

Tomer_Sole — Sun, 26 Aug 2018 06:10:53 GMT

We will publish an R80.20 guide soon but regarding hyper-threading, the recommendation has changed from NO in R80.10 to "make sure that you test that effect on a lab first". With the new kernel of R80.20.M1 and the upcoming R80.20 we cannot give a guaranteed answer whether this speeds up daily operations or slows them down as we received different findings from different environments.

Re: R80.10 Security Management Performance Tuning Guide

Tomer_Sole — Sun, 26 Aug 2018 06:12:10 GMT

1. Get the answers to the questions that appear in the "Assessing" section

2. Visit the 2018 appliance data sheet and find the appliance column that fits your answers from step 1

3. The RAM, CPU and disk specifications that appear in the appliance column, should be the hardware that you give to your VM.

Re: R80.10 Security Management Performance Tuning Guide

Tomer_Sole — Sun, 26 Aug 2018 06:20:13 GMT

I believe all major browsers have a "print to PDF" option.

Re: R80.10 Security Management Performance Tuning Guide

Kim_Moberg — Mon, 27 Aug 2018 19:12:33 GMT

Hi Tomer,

I think I have read something about this some were. So if one uses a vsphere with ssd disks with R80.10 it would not give same performance if one uses a linux kernel version higher than 3.xx .

The linux kernel 3.1x are better to handle ssd hard drives to clean it up after usage. This might be an issues with earlier linux kernel versions like the one used in R80.10

Am I totally wrong here? or how is it?

thanks

Re: R80.10 Security Management Performance Tuning Guide

Tomer_Sole — Mon, 27 Aug 2018 19:24:21 GMT

Since Linux 3.1x is not even a choice for R80.10 we didn't include that in the guide.

Re: R80.10 Security Management Performance Tuning Guide

PhoneBoy — Tue, 28 Aug 2018 23:50:06 GMT

Doesn't the newer Smart-1 Appliances use the 3.10 kernel via a special install ISO?

Re: R80.10 Security Management Performance Tuning Guide

_Val_ — Wed, 29 Aug 2018 07:11:57 GMT

well done Tomer Sole‌

Re: R80.10 Security Management Performance Tuning Guide

18568 — Mon, 05 Nov 2018 13:25:47 GMT

Very interesting guide. Just checking if there is any update regarding the R80.20 guide now that R80.20 is GA?

Re: R80.10 Security Management Performance Tuning Guide

Christof_Jacque — Tue, 06 Nov 2018 14:22:20 GMT

That datasheet does not contain any info on the I/O 'amount' needed, unless I'm missing something. Can you clarify, please?

Re: R80.10 Security Management Performance Tuning Guide

Timothy_Hall — Wed, 07 Nov 2018 13:13:02 GMT

Tomer Sole‌ should be able to give the definitive answer here, but based on the limited changes in the $CPDIR/conf/CpSetupInfo_resourceProfiles.conf file for the SMS between R80.10 and R80.20, I think everything in that guide will still be applicable to R80.20. You can read more about that file and how it affects SMS performance here:

https://community.checkpoint.com/message/16843-re-mangement-server-r8010-slowness?commentID=16843#comment-17639

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com