- Products
- Learn
- Local User Groups
- Partners
- More
What's New in R82.10?
10 December @ 5pm CET / 11am ET
Improve Your Security Posture with
Threat Prevention and Policy Insights
Overlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
Hi
Have a 1575 xlcluster running (a old version) R81.10.07 (996001397).
I had a issue where the cluster would not sync correctly as one device had configured 4 kernel cpu and the other 3 kernel cpu. This, i fixed by setting both devices to 3 cpu with command FW_BOOT_DIR=/opt/fw1/boot fwboot corexl enable 3.
Looking at the boot.conf file (cat /opt/fw1/boot/boot.conf) i see 1 device has KERN_INSTANCE_NUM set to 4 and the other to 3. Without knowing i guess they should be identical.
How do i change KERN_INSTANCE_NUM to 3 in expert mode on a Quantum Spark device?
Regards
Robert
Hi,
The file should have been automatically updated after running the fwboot command.
If this did not happen then you can edit (using vi) /opt/fw1/boot/boot.conf.
In order to be on the safe side, just make sure that:
cat /proc/cpuinfo | grep processor
shows 3 CPUs on this gateway.
Thanks.
Hi Robert,
It's not healthy to manually change the number of cores,
As I assume you have a cluster of 2 1575, the core discrepancy is probably due to a missing license in one of the appliances.
please check your license status.
If it still doesn't work please ask to open a CFG Task.
Thanks
Are you sure both appliances are both 1575? They should have 3 cores and not 4
| Model of a Quantum Spark Appliance |
Total number of CPU cores |
Default number |
Default number |
Default number |
Maximum* number |
| 1535 | 3 | 3 | 2 | 2 | 2 |
| 1530 | 3 | 3 | 2 | 2 | 2 |
| 1555 | 4 | 4 | 2 | 2 | 2 |
| 1550 | 4 | 4 | 2 | 2 | 2 |
| 1575 | 3 | 3 | 2 | 2 | 2 |
| 1570 | 3 | 3 | 2 | 2 | 2 |
| 1595 | 4 | 4 | 2 | 2 | 2 |
| 1590 | 4 | 4 | 2 | 2 | 2 |
Is license also the same? Maybe one has or had trial?
In 1530 and 1570 appliances, the gateway shows 4 cores when using a trial license. After deploying the license from the User Center, the number of visible cores is 3.
To view the current number of IPv4 CoreXl Firewall instances, run:
fw ctl multik stat
To change the number of IPv4 CoreXL Firewall instances:
Run this command in the Expert mode:
FW_BOOT_DIR=/opt/fw1/boot fwboot corexl enable <Number of IPv4 Instances>
Reboot the appliance.
Are you sure both appliances are both 1575?
>>> Yes
Is license also the same?
>>> Yes
As i wrote, i fixed the number of cores to 3 by running the command FW_BOOT_DIR=/opt/fw1/boot fwboot corexl enable 3.
I am asking about the KERN_INSTANCE_NUM value.
BOX1:
ID | Active | CPU | Connections | Peak
----------------------------------------------
0 | Yes | 0 | 98 | 175
1 | Yes | 1 | 114 | 165
2 | Yes | 2 | 114 | 242
[Expert@fw-as-rodovre1]# cat /opt/fw1/boot/boot.conf
KERN_INSTANCE_NUM 3
COREXL_INSTALLED 1
KERN6_INSTANCE_NUM 2
BOX2:
ID | Active | CPU | Connections | Peak
----------------------------------------------
0 | Yes | 0 | 138 | 546
1 | Yes | 1 | 162 | 561
2 | Yes | 2 | 188 | 644
[Expert@fwasrodovre2]# cat /opt/fw1/boot/boot.conf
KERN_INSTANCE_NUM 4
COREXL_INSTALLED 1
KERN6_INSTANCE_NUM 2
Host Expiration Features
127.0.0.1 never CPAP-AP1575 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB -ADNC-M CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPAP-CLOUD-MGMT CPSB-CTNT CK-00-1C -7F-B7-38-B2
Host Expiration Features
127.0.0.1 never CPAP-AP1575 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB-ADNC-M CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPAP-CLOUD-MGMT CPSB-CTNT CK-00-1C-7F-B7-38-F1
1530 and 1550 / 1570 and 1590 share the same hardware, upon applying the license one core is disabled on the 1530/1570.
Eg a fresh 1530 before applying a license is shown as a 1550.
Well both have a valid license so that´s not the issue here.
My question is how to i edit boot.conf in a valid checkpoint way?
Hi,
The file should have been automatically updated after running the fwboot command.
If this did not happen then you can edit (using vi) /opt/fw1/boot/boot.conf.
In order to be on the safe side, just make sure that:
cat /proc/cpuinfo | grep processor
shows 3 CPUs on this gateway.
Thanks.
Thank you.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 4 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Wed 26 Nov 2025 @ 12:00 PM (COT)
Panama City: Risk Management a la Parrilla: ERM, TEM & Meat LunchWed 03 Dec 2025 @ 10:00 AM (COT)
Última Sesión del Año – CheckMates LATAM: ERM & TEM con ExpertosThu 04 Dec 2025 @ 12:30 PM (SGT)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - APACThu 04 Dec 2025 @ 03:00 PM (CET)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - EMEAThu 04 Dec 2025 @ 02:00 PM (EST)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - AmericasWed 03 Dec 2025 @ 10:00 AM (COT)
Última Sesión del Año – CheckMates LATAM: ERM & TEM con ExpertosThu 04 Dec 2025 @ 12:30 PM (SGT)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - APACThu 04 Dec 2025 @ 03:00 PM (CET)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - EMEAThu 04 Dec 2025 @ 02:00 PM (EST)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - AmericasWed 26 Nov 2025 @ 12:00 PM (COT)
Panama City: Risk Management a la Parrilla: ERM, TEM & Meat LunchAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY