R81.20 Jumbo take 99, resolved problem PRJ-58560, PRHF-37532

[Wolfgang]

Can someone confirm that the following issue is really resolved with take 99

High CPU utilization in Maestro Security Group because of multiple instances of the "mq_mng -u" proc...

[the_rock · Accepted solution]

According to documentation, it is.

Andy

https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Take_99.htm?Highlight=58560

[Wolfgang]

Thanks Andy, but maybe someone from the field with a system in production environment can confirm. We had a major outage last time we enabled dynamic_balancing and we have to be safe for the next try.

[the_rock]

Yep, confirmed that too. I work often with customer that uses Maestro and saw from my notes this was what they did to fix the issue, ie apply jumbo 99.

[JozkoMrkvicka]

You dont trust what Check Point wrote as fixed, dont you ? 😉 I am on the same boat here.

Can you install Take 99 on standby member to see if issue is fixed on your environment ?

[the_rock]

100% its fixed.

Andy

[Wolfgang]

@JozkoMrkvicka sometimes you have to doublecheck. We‘ll give it a try in the next days.

We are aware of the private fix mentioned by @AaronCP but we didn‘t installed. It‘s a horrible installation orgy on Maestro with private hotfixes and we‘ll try our best to never install them. Stopping dynamic_balancing with 6 SNDs was a good solution in the meantime.

[the_rock]

Nothing wrong with that. Trust me, I see customers do this regardless of the vendor.

Andy

[the_rock]

I also emailed our SE as well about this, he confirmed it is fixed in jumbo 99.

Andy

[Dario_Perez]

Open a ticket with TAC as question to confirm since this is the official channel to get confirmation 

[AaronCP]

Hey @Wolfgang,

We experienced this issue on our Prodution Maestro deployments. We installed T98 + a custom hotfix to address the two problems you mentioned (T99 wasn't recommended at the time) and it's resolved the issue. The SGMs have Dynamic Balancing enabled and FW, IPS & AB blades enabled. CPU is looking much healthier now. If those fixes are included in T99, then it should address those issues.

Thanks,

Aaron.