topic Re: R81.20 Jumbo take 99, resolved problem PRJ-58560, PRHF-37532 in Hyperscale Firewall (Maestro)

R81.20 Jumbo take 99, resolved problem PRJ-58560, PRHF-37532

Wolfgang — Fri, 09 May 2025 20:37:06 GMT

Can someone confirm that the following issue is really resolved with take 99

High CPU utilization in Maestro Security Group because of multiple instances of the "mq_mng -u" process

Re: R81.20 Jumbo take 99, resolved problem PRJ-58560, PRHF-37532

the_rock — Fri, 09 May 2025 22:02:04 GMT

According to documentation, it is.

Andy

https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Take_99.htm?Highlight=58560

Re: R81.20 Jumbo take 99, resolved problem PRJ-58560, PRHF-37532

the_rock — Sat, 10 May 2025 01:07:01 GMT

I also emailed our SE as well about this, he confirmed it is fixed in jumbo 99.

Andy

Re: R81.20 Jumbo take 99, resolved problem PRJ-58560, PRHF-37532

Dario_Perez — Sat, 10 May 2025 02:55:29 GMT

Open a ticket with TAC as question to confirm since this is the official channel to get confirmation

Re: R81.20 Jumbo take 99, resolved problem PRJ-58560, PRHF-37532

Wolfgang — Sat, 10 May 2025 13:43:47 GMT

Thanks Andy, but maybe someone from the field with a system in production environment can confirm. We had a major outage last time we enabled dynamic_balancing and we have to be safe for the next try.

Re: R81.20 Jumbo take 99, resolved problem PRJ-58560, PRHF-37532

the_rock — Sat, 10 May 2025 16:09:08 GMT

Yep, confirmed that too. I work often with customer that uses Maestro and saw from my notes this was what they did to fix the issue, ie apply jumbo 99.

Re: R81.20 Jumbo take 99, resolved problem PRJ-58560, PRHF-37532

AaronCP — Sat, 10 May 2025 19:04:25 GMT

Hey @Wolfgang,

We experienced this issue on our Prodution Maestro deployments. We installed T98 + a custom hotfix to address the two problems you mentioned (T99 wasn't recommended at the time) and it's resolved the issue. The SGMs have Dynamic Balancing enabled and FW, IPS & AB blades enabled. CPU is looking much healthier now. If those fixes are included in T99, then it should address those issues.

Thanks,

Aaron.

Re: R81.20 Jumbo take 99, resolved problem PRJ-58560, PRHF-37532

JozkoMrkvicka — Sun, 11 May 2025 08:23:53 GMT

You dont trust what Check Point wrote as fixed, dont you ? 😉 I am on the same boat here.

Can you install Take 99 on standby member to see if issue is fixed on your environment ?

Re: R81.20 Jumbo take 99, resolved problem PRJ-58560, PRHF-37532

the_rock — Sun, 11 May 2025 13:52:26 GMT

100% its fixed.

Andy

Re: R81.20 Jumbo take 99, resolved problem PRJ-58560, PRHF-37532

Wolfgang — Sun, 11 May 2025 19:32:33 GMT

@JozkoMrkvicka sometimes you have to doublecheck. We‘ll give it a try in the next days.

We are aware of the private fix mentioned by @AaronCP but we didn‘t installed. It‘s a horrible installation orgy on Maestro with private hotfixes and we‘ll try our best to never install them. Stopping dynamic_balancing with 6 SNDs was a good solution in the meantime.

Re: R81.20 Jumbo take 99, resolved problem PRJ-58560, PRHF-37532

the_rock — Sun, 11 May 2025 20:28:44 GMT

Nothing wrong with that. Trust me, I see customers do this regardless of the vendor.

Andy