SMS Sizing

[Patrickc]

Hi All,

The customer currently wants to replace the old firewall with a new one. The management server is running on a VM ESXi, and it also needs to be rebuilt. Due to the company's policy, a re-evaluation and recommendation of CPU and memory are required. The disk requirements are clear, but I am not sure where to start with the CPU and memory recommendations. Please provide your suggestions.

Current environment:

• Rulebase with over 10,000 rules
• Daily log volume is approximately 20GB
• Managing 4 firewalls (2 Clusters)
• Version :R81.20

[Tal_Paz-Fridman · Accepted solution]

Please refer to Sizing Recommendations for Check Point Management Server:

https://support.checkpoint.com/results/sk/sk178325

[the_rock]

Personally, if it was me, with 10K rules, I would say even VM is okay, but probably with at least 128 GB of ram and ssd drive and at least 12, preferable 16 cores. 

Otherwise, what @Tal_Paz-Fridman sent is an official CP sk about it, so I would definitely follow that.

Andy

[Bob_Zimmerman]

That seems like a really large number of rules for just two clusters.

I have an environment about that size (fewer rules, more clusters, more log volume). It's currently a management server (4 Xeon Gold 6254 cores, ~90% idle, 24 GB of RAM, no swap used) and a separate log server (4 Xeon Gold 6254 cores, ~40% idle, 32 GB of RAM, no swap used). As long as the storage is fast enough, I'd be comfortable with a single system with 6 equivalent cores and 64 GB of RAM.

[the_rock]

Thats very valid point Bob. I had never seen anyone have more than 4000 rules. But, mgmt with 64 GB of ram sounds about right.

Andy