R81 - new interesting commands

[HeikoAnkenbrand]

IPS statistics

This information shows which matched IPS Protections cause a high load on the CPU. Here is a new command "fw pm_stats" for R81.

This command collects IPS & Pattern Matcher statistics for all patterns on the local machine for the specified number of seconds (in this example for 60 seconds):

Example:
# fw pm_stats collect_csv_on_demand 60

The output files are located in the current directory.

./pm_stat_collect.csv.tier1.csv            ->    Displays the statistics of the Pattern Matcher First Tier
./pm_stat_collect.csv.tier2.csv            ->    Displays the statistics of the Pattern Matcher Second Tier

Attention:
This command enables Pattern Matcher statistics for all patterns which consume more RAM and may reduce performance of a Gateway.

This command collects IPS & Pattern Matcher statistics for new IPS protections (protections with release date of less than 30 days)

Example:
# fw pm_stats collect_csv

By default the Pattern Matcher statistics is always enabled for new IPS protections, and the collection is without performance and memory impact.

------

[HeikoAnkenbrand]

Clish Multi Queue commands show and configure Multi Queue on the supported interfaces.

Configure MQ:

> set interface <if name> multi-queue {off | auto | manual core <IDs of CPU cores>

Show the existing MQ configuration:

> show interface <if name> multi-queue [verbose]

[RickLin]

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_CLI_ReferenceGuide/Topics-CLIG/PTG...

I found this.

[balder_skoeld]

Here are some articles not yet finished. I think this is the R81 EA documentation.

[RickLin]

Just GA

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_RN/Topics-RN/Whats-New.htm