Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Amtechdam123
Participant

Checkpoint load high performance R80.10

Currently, the Checkpoint CP5100 (Con Active) main firewall pair runs very high on the CPU, sometimes up to> 90%, as shown below. OUT) does not see anything unusual at the moment

Hope everyone support check this error to see what the problem is to have plans to upgrade and adjust promptly.

0 Kudos
Reply
5 Replies
Chris_Atkinson
Employee
Employee

Have you reviewed top & cpview for clues?

0 Kudos
Reply
Amtechdam123
Participant

No, I don't understand.
Can you guide me, please?

0 Kudos
Reply
Amtechdam123
Participant

I tried it and got the results as shown in the picture.
I don't know the problem at the beginning.

0 Kudos
Reply
G_W_Albrecht
Champion
Champion

Contact CP TAC, they will provide a monitoring script to analyze the behaviour in detail. And meanwhile refer to sk98348: Best Practices - Security Gateway Performance (and for VPN to sk105119: Best Practices - VPN Performance).

Timothy_Hall
Champion
Champion

Well it looks like you have a pair of 5100s (which have a mere 2-core Celeron processor) deployed in Full HA (both SMS & gateway on both members) so it won't take very much going on to cause high CPU.  Please post the output of the "Super Seven" commands run from the active member of the cluster, but I can pretty much guarantee successful tuning will be an uphill battle:

https://community.checkpoint.com/t5/General-Topics/Super-Seven-Performance-Assessment-Commands-s7pac...

 

"Max Capture: Know Your Packets" Video Series
now available at http://www.maxpowerfirewalls.com