topic Re: vpn problem with high ports in General Topics

vpn problem with high ports

ITTech — Wed, 03 Jul 2024 07:12:26 GMT

good morning

I have a problem with my cluster XL R81.10 Take 139.

Client has configured a monitoring task with the application Teenable, when it launches the monitoring, you can see that the computer cpu is saturated, but only happens with high ports, keep in mind that this monitoring is done through vpn.

I attach evidence:

Re: vpn problem with high ports

PhoneBoy — Wed, 03 Jul 2024 21:24:40 GMT

You should probably fw fast_accel the traffic so it doesn't get inspected by the higher-level blades.
https://support.checkpoint.com/results/sk/sk156672

Re: vpn problem with high ports

the_rock — Wed, 03 Jul 2024 22:43:34 GMT

I agree with Phoneboy, makes most logical sense in your case.

Andy

Re: vpn problem with high ports

emmap — Thu, 04 Jul 2024 01:47:35 GMT

Tenable puts out a lot of connections that then have to be decrypted/encrypted by the gateway in your case, so it's not too surprising that there's a load issue. Is there a way to 'turn down' tenable so that it's doing its work more slowly?

Re: vpn problem with high ports

ITTech — Thu, 04 Jul 2024 05:11:50 GMT

Hi Phoneboy

Thans for your answer, Actually the appliance has the vpn accel in state on

Re: vpn problem with high ports

PhoneBoy — Mon, 08 Jul 2024 13:56:49 GMT

Traffic that hits Medium Path is accelerated, but it's more heavy than fully accelerated traffic.
Output of Super Seven commands might be helpful here: https://community.checkpoint.com/t5/Scripts/S7PAC-Super-Seven-Performance-Assessment-Commands/m-p/40528