Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Amtechdam123
Participant

Checkpoint load high performance R80.10

Currently, the Checkpoint CP5100 (Con Active) main firewall pair runs very high on the CPU, sometimes up to> 90%, as shown below. OUT) does not see anything unusual at the moment

Hope everyone support check this error to see what the problem is to have plans to upgrade and adjust promptly.

0 Kudos
5 Replies
Chris_Atkinson
Employee Employee
Employee

Have you reviewed top & cpview for clues?

CCSM R77/R80/ELITE
0 Kudos
Amtechdam123
Participant

No, I don't understand.
Can you guide me, please?

0 Kudos
Amtechdam123
Participant

I tried it and got the results as shown in the picture.
I don't know the problem at the beginning.

0 Kudos
G_W_Albrecht
Legend
Legend

Contact CP TAC, they will provide a monitoring script to analyze the behaviour in detail. And meanwhile refer to sk98348: Best Practices - Security Gateway Performance (and for VPN to sk105119: Best Practices - VPN Performance).

CCSE CCTE CCSM SMB Specialist
Timothy_Hall
Champion
Champion

Well it looks like you have a pair of 5100s (which have a mere 2-core Celeron processor) deployed in Full HA (both SMS & gateway on both members) so it won't take very much going on to cause high CPU.  Please post the output of the "Super Seven" commands run from the active member of the cluster, but I can pretty much guarantee successful tuning will be an uphill battle:

https://community.checkpoint.com/t5/General-Topics/Super-Seven-Performance-Assessment-Commands-s7pac...

 

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events