Checkpoint Memory Upgrade

[clinton1]

Good day, can anyone please point me to the section on the firewall with information about device memory( smart console/ web ui /cli). This information is needed for a memory upgrade. Thanks

[G_W_Albrecht]

Can you pleade explain what you are trying to achive ?

• device memory can be displayed on unix using top, free -m, but best is cpview (also see https://support.checkpoint.com/results/sk/sk98348 for more commands and details)
• SmartConsole runs under Windows and not on the GW, so use device memory from SMS as in line 1
• WebUI also runs on the client OS, so use device memory from GW or SMS as in line 1
• CLI runs on GW or SMS, see line 1

[clinton1]

Thanks for your response. The purpose of inquiring about the device memory is that the firewall memory space is almost exhausted and we feel the best approach is to upgrade just as we do with most devices. I need to determine what initial factory memory the device came with in order to guide in knowing how much more memory can be bought. Hope this clarifies. Thanks.

[Chris_Atkinson]

Which model appliance are you working with?

Based on this and the output of some commands (noted above) we can help you to better understand the population / options. 

[clinton1]

Checkpoint 5100 appliance. Thanks

[Chris_Atkinson]

5100 is up to 16GB (8GB default)

Please refer:

3000 & 5000 install memory guide

5100 appliance datasheet 

[the_rock]

To help us, it would be good to have below outputs (from expert mode)

top

free -m (or free -g)

ps -auxw

cpview (check for memory usage)

Also, you can have a look at SV monitor and see what it shows there (from smart console)

Dont start throwing money away on memory upgrade if its something that can be fixed.

Andy

[Bob_Zimmerman]

What is telling you the memory is full? A lot of tools provide very misleading information about memory consumption.

Is the system swapping?

[ascoyne]

We monitor using SNMP via SolarWinds.  We integrate using the oids.

[ascoyne]

Does the memory need to be purchased directly from the Check Point reseller, or can we upgrade with a matched on-the-shelf Crucial module i.e. same size and speed? 

Are there licensing implications of upgrading the memory ourselves?

[emmap · Accepted solution]

It's only supported to add RAM via a CP reseller. There's no licensing change required.

[ascoyne]

The crazy mark-up of memory from Check Point  - the same module

https://uk.crucial.com/memory/ddr4/ct16g4dfd824a - 51.59

https://hssl.us/check-point-16gb-ddr4-sdram-memory-module-cpac-ram16gb-6700/ - 1029.27

[the_rock]

Put it this way...do 3rd party accessories work? Yes, they do. Is it supported? No, its not. So, its all about the risk. As long as you are aware, but say you do it anyway knowing the facts beforehand, then its all up to you later to deal with any issues that would arise. As @emmap advised, there would be no licensing change, but if any problems, you would never get RMA done either.

Hope that helps.

Andy

[ascoyne]

Thank you.  That makes sense.  We need to think that it's the peace of mind of having support.

[the_rock]

I totally agree, thats super important. I know this may seem like a silly comparison, but I always use it having been literally all over the world...its sort of when your government advises you NOT to travel to certain country and you do it anyway, well, then you have to deal with that if something happens. Anyway, I wont say what country it was, I made the best of it and Im still here : - )

Best,

Andy