topic Re: Checkpoint load high performance R80.10 in General Topics

Checkpoint load high performance R80.10

Amtechdam123 — Tue, 04 Aug 2020 08:14:51 GMT

Currently, the Checkpoint CP5100 (Con Active) main firewall pair runs very high on the CPU, sometimes up to> 90%, as shown below. OUT) does not see anything unusual at the moment

Hope everyone support check this error to see what the problem is to have plans to upgrade and adjust promptly.

Re: Checkpoint load high performance R80.10

Chris_Atkinson — Wed, 05 Aug 2020 11:26:47 GMT

Have you reviewed top & cpview for clues?

Re: Checkpoint load high performance R80.10

Amtechdam123 — Fri, 07 Aug 2020 03:35:32 GMT

No, I don't understand.
Can you guide me, please?

Re: Checkpoint load high performance R80.10

Amtechdam123 — Fri, 07 Aug 2020 03:38:23 GMT

I tried it and got the results as shown in the picture.
I don't know the problem at the beginning.

Re: Checkpoint load high performance R80.10

G_W_Albrecht — Fri, 07 Aug 2020 10:39:22 GMT

Contact CP TAC, they will provide a monitoring script to analyze the behaviour in detail. And meanwhile refer to sk98348: Best Practices - Security Gateway Performance (and for VPN to sk105119: Best Practices - VPN Performance).

Re: Checkpoint load high performance R80.10

Timothy_Hall — Fri, 07 Aug 2020 13:57:49 GMT

Well it looks like you have a pair of 5100s (which have a mere 2-core Celeron processor) deployed in Full HA (both SMS & gateway on both members) so it won't take very much going on to cause high CPU. Please post the output of the "Super Seven" commands run from the active member of the cluster, but I can pretty much guarantee successful tuning will be an uphill battle:

https://community.checkpoint.com/t5/General-Topics/Super-Seven-Performance-Assessment-Commands-s7pac/m-p/40528