topic Re: High Memory after Install 110Take in General Topics

High Memory after Install 110Take

Kolafer — Fri, 13 Oct 2023 15:29:58 GMT

Hello Community,

do someone make someone experience with high memory after upgrade the getaway with R81.10 Take 110?

Model: Check Point 23800
Version: R81.10 Take 110

Only Firewall Blade and PEP/PDP enabled on the firewall. CPU Util looks good.

What are this processes ?

in.aftpd
in.emaild.pop
in.asmtpd

Thanks

Re: High Memory after Install 110Take

Timothy_Hall — Fri, 13 Oct 2023 16:02:21 GMT

Do you have the DLP or Content Awareness blades enabled? Those features take advantage of the in.aftpd daemon and you seem to have an awful lot of them.

Re: High Memory after Install 110Take

Kolafer — Fri, 13 Oct 2023 16:04:36 GMT

Hi,

no only FW and IA

[Expert@FW]# enabled_blades
fw identityServer

Re: High Memory after Install 110Take

Timothy_Hall — Fri, 13 Oct 2023 16:13:51 GMT

I can't think of any valid reason why those three security server processes (and so many of them) are running on your gateway with only those blades enabled unless you are utilizing legacy User/Client/Session authentication actions in your rulebase which is unlikely. This behavior seems like a bug to me especially since you just updated your HFA level. Probably going to have to get TAC involved, or you could try backing out the HFA.

Re: High Memory after Install 110Take

PhoneBoy — Fri, 13 Oct 2023 20:21:26 GMT

Best to get the TAC involved here: https://help.checkpoint.com

Re: High Memory after Install 110Take

the_rock — Fri, 13 Oct 2023 20:51:02 GMT

I would also suggest TAC case for this.

Andy

Re: High Memory after Install 110Take

the_rock — Fri, 13 Oct 2023 22:20:17 GMT

Can you also send us output of below commands?

cpview (look for memory usage)

ps -auxw

top

free -g

cpwd_admin list

Andy

Re: High Memory after Install 110Take

Kolafer — Sat, 14 Oct 2023 17:09:58 GMT

Hi Rock,

here the output. I will also open TAC on monday.

Thanks

Re: High Memory after Install 110Take

genisis__ — Sat, 14 Oct 2023 18:08:29 GMT

If this does turn out to be a bug, please let the community know, ideally with a bug id.

Re: High Memory after Install 110Take

Chris_Atkinson — Sat, 14 Oct 2023 23:05:44 GMT

Recommend upgrading to T113 and above or reviewing the work arounds per sk180505.

Re: High Memory after Install 110Take

the_rock — Sat, 14 Oct 2023 23:55:20 GMT

Tx @Kolafer , will check tomorrow after I do my 50k bike ride 🙂

Andy

Re: High Memory after Install 110Take

genisis__ — Sun, 15 Oct 2023 08:43:45 GMT

T113 has been in 'ongoing' status for a little longer than normal, but I would expect this to be GA very soon.

Re: High Memory after Install 110Take

the_rock — Sun, 15 Oct 2023 13:39:10 GMT

Ok, just had a chance to look at it...I find the issue a bit odd, because based on what you sent, appears you have lots of memory free, as a matetr of fact, shows 30 GB free.

Also, cpu seems fine to me. Processes you asked about are related to security servers. Do you have any sort of client auth configured?

Kind regards,

Andy

Re: High Memory after Install 110Take

the_rock — Sun, 15 Oct 2023 15:30:24 GMT

Thats true, but I would personally not bother until it is marked as recommended.

Andy

Re: High Memory after Install 110Take

Kolafer — Mon, 16 Oct 2023 07:59:03 GMT

Hi Chris,

I checkt the output on the firewall from the sk180505.

It look similar.

Re: High Memory after Install 110Take

Kolafer — Mon, 16 Oct 2023 08:49:45 GMT

add information.

we have also some other processes running, which are not included in the sk180505