Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
HeikoAnkenbrand
Champion Champion
Champion

R81 - new interesting commands

IPS statistics

This information shows which matched IPS Protections cause a high load on the CPU. Here is a new command "fw pm_stats" for R81.

This command collects IPS & Pattern Matcher statistics for all patterns on the local machine for the specified number of seconds (in this example for 60 seconds):

Example:
# fw pm_stats collect_csv_on_demand 60

The output files are located in the current directory.

./pm_stat_collect.csv.tier1.csv            ->    Displays the statistics of the Pattern Matcher First Tier
./pm_stat_collect.csv.tier2.csv            ->    Displays the statistics of the Pattern Matcher Second Tier

Attention:
This command enables Pattern Matcher statistics for all patterns which consume more RAM and may reduce performance of a Gateway.

This command collects IPS & Pattern Matcher statistics for new IPS protections (protections with release date of less than 30 days)

Example:
# fw pm_stats collect_csv

By default the Pattern Matcher statistics is always enabled for new IPS protections, and the collection is without performance and memory impact.

------

 

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
4 Replies
HeikoAnkenbrand
Champion Champion
Champion

Clish Multi Queue commands show and configure Multi Queue on the supported interfaces.

Configure MQ:

> set interface <if name> multi-queue {off | auto | manual core <IDs of CPU cores>

Show the existing MQ configuration:

> show interface <if name> multi-queue [verbose]

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
balder_skoeld
Participant

Here are some articles not yet finished. I think this is the R81 EA documentation.

0 Kudos
RickLin
Advisor
Advisor

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events