Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Davis_Laker
Participant

Utilization Level on Maestro

Hello,

I'm running a Maestro environment on (2) MHO 145s and (3) 6700s running on R81.10 Take 130.  I'm running a single SG with VSX.

I recently added a couple of new VS firewalls and I would like to find out the best way to determine hardware utilization of my Maestro and if I need to consider adding an additional SGM to my cluster with the additional traffic I've added.

Its VSX, so I assume cpsizeme work on the SMO (since cpsizeme isn't compatible with VSX)

Is it possible to run cpsizeme on each of my SGMs?

I've run CPView, but it appears to only be taking each VS firewall into account on CPU percentage.  I'm not sure how that equivalates to total hardware consumption though.

Is there any other recommendations on how to get total hardware utilization over time?

0 Kudos
4 Replies
Dario_Perez
Employee Employee
Employee

Hi

for Single VSX gateway you mean only 1 SGM on Security Group?

To see the performance of maestro we use asg perf -v instead cpview

To see the performance on each VS at same time you can run asg perf -vs all -v -vv

0 Kudos
Lesley
Leader Leader
Leader

No support for CPsizeme on Maestro as stated in: https://support.checkpoint.com/results/sk/sk148074 and https://support.checkpoint.com/results/sk/sk88160

Depending on the setup you need to check the load of the firewall itself in the SGM. So if you have 2 3x 6700 units running in on SGM within Maestro then you need to check each 6700 for the load. With cpview you can find a lot of information or with your monitoring tool, to pull out some graphs. 

-------
If you like this post please give a thumbs up(kudo)! 🙂
0 Kudos
Lesley
Leader Leader
Leader

check also this video

https://www.youtube.com/watch?v=bYt4wx5dC-k&ab_channel=CheckPointUK%26Ireland

-------
If you like this post please give a thumbs up(kudo)! 🙂
0 Kudos
emmap
Employee
Employee

You can set up Skyline monitoring, or you can monitor CPU stats via SNMP, or you can look at 'top' on each SGM, or you can run an HCP report across all SGMs and check the charts in there or you can look at 'asg perf' and its various flags for a point-in-time view.. many options. 

0 Kudos