topic Re: Utilization Level on Maestro in Hyperscale Firewall (Maestro)

Utilization Level on Maestro

Davis_Laker — Tue, 28 May 2024 17:45:31 GMT

Hello,

I'm running a Maestro environment on (2) MHO 145s and (3) 6700s running on R81.10 Take 130. I'm running a single SG with VSX.

I recently added a couple of new VS firewalls and I would like to find out the best way to determine hardware utilization of my Maestro and if I need to consider adding an additional SGM to my cluster with the additional traffic I've added.

Its VSX, so I assume cpsizeme work on the SMO (since cpsizeme isn't compatible with VSX)

Is it possible to run cpsizeme on each of my SGMs?

I've run CPView, but it appears to only be taking each VS firewall into account on CPU percentage. I'm not sure how that equivalates to total hardware consumption though.

Is there any other recommendations on how to get total hardware utilization over time?

Re: Utilization Level on Maestro

Dario_Perez — Tue, 28 May 2024 17:53:50 GMT

for Single VSX gateway you mean only 1 SGM on Security Group?

To see the performance of maestro we use asg perf -v instead cpview

To see the performance on each VS at same time you can run asg perf -vs all -v -vv

Re: Utilization Level on Maestro

Lesley — Tue, 28 May 2024 17:54:32 GMT

No support for CPsizeme on Maestro as stated in: https://support.checkpoint.com/results/sk/sk148074 and https://support.checkpoint.com/results/sk/sk88160

Depending on the setup you need to check the load of the firewall itself in the SGM. So if you have 2 3x 6700 units running in on SGM within Maestro then you need to check each 6700 for the load. With cpview you can find a lot of information or with your monitoring tool, to pull out some graphs.

Re: Utilization Level on Maestro

Lesley — Tue, 28 May 2024 18:13:27 GMT

check also this video

https://www.youtube.com/watch?v=bYt4wx5dC-k&ab_channel=CheckPointUK%26Ireland

Re: Utilization Level on Maestro

emmap — Tue, 28 May 2024 21:56:57 GMT

You can set up Skyline monitoring, or you can monitor CPU stats via SNMP, or you can look at 'top' on each SGM, or you can run an HCP report across all SGMs and check the charts in there or you can look at 'asg perf' and its various flags for a point-in-time view.. many options.