Checkpoint load high performance R80.10

[Amtechdam123]

Currently, the Checkpoint CP5100 (Con Active) main firewall pair runs very high on the CPU, sometimes up to> 90%, as shown below. OUT) does not see anything unusual at the moment

Hope everyone support check this error to see what the problem is to have plans to upgrade and adjust promptly.

[Chris_Atkinson]

Have you reviewed top & cpview for clues?

[Amtechdam123]

No, I don't understand.
Can you guide me, please?

[Amtechdam123]

I tried it and got the results as shown in the picture.
I don't know the problem at the beginning.

[G_W_Albrecht]

Contact CP TAC, they will provide a monitoring script to analyze the behaviour in detail. And meanwhile refer to sk98348: Best Practices - Security Gateway Performance (and for VPN to sk105119: Best Practices - VPN Performance).

[Timothy_Hall]

Well it looks like you have a pair of 5100s (which have a mere 2-core Celeron processor) deployed in Full HA (both SMS & gateway on both members) so it won't take very much going on to cause high CPU.  Please post the output of the "Super Seven" commands run from the active member of the cluster, but I can pretty much guarantee successful tuning will be an uphill battle:

https://community.checkpoint.com/t5/General-Topics/Super-Seven-Performance-Assessment-Commands-s7pac...