Checkpoint mgmt server random high cpu

[rajeshpk1900]

Hi All,

I have Checkpoint mgmt. server R80.30 take 214 which manages multiple firewals.

I can see that whenever I policy verification for some firewalls, the management server cpu utilization is going high.

Could someone let me know is this a normal behavior and if so, is there any document for the same.

Please be noted that I am not installing any policies during the time, but only verification is being done.

cpstat -f multi_cpu os > show 16 CPUs.

Mgmt#cpstat -f cpu os

CPU User Time (%):   67

CPU System Time (%): 5

CPU Idle Time (%):   27

CPU Usage (%):       73

CPU Queue Length:    -

CPU Interrupts/Sec:  2000

CPUs Number:         16

[Timothy_Hall · Accepted solution]

Policy verification is performed by the multi-threaded java process cpm in R80+, so this is expected behavior; java will attempt to use as many available resources as possible to finish its operation expediently.  Would you prefer that it use less CPU and the verification takes much longer?  😀

Most elements of policy compilation are still performed by the single-threaded fwm process, which can only use one CPU at a time so overall CPU usage will look lower during this phase of gateway policy installation.

[rajeshpk1900]

Thanks for the update...It was of great help