Low storage space for /pfrm2.0

[Bistro]

We have over 90% storage usage on /pfrm2.0 on a GAIA Embedded 1100 Appliance R77.20.80 - Build 507 device, looking at the content all of it seems static application content that can't be removed, is there any solution to reducing the storage usage in /pfrm2.0?

so far tried sk165895 and sk126372 with no luck.

[the_rock]

Lets see if SMB master @G_W_Albrecht can help out here. I dont know if below command works, but you can try...

find /pfrm2.0 -size +200000000c

That would look for any files bigger than 200 MBs on that dir.

[Bistro]

Thank you for your reply
Our /pfrm2.0 only has 113.0M of space, unsure if that's abnormal

I've altered the command to see if there was anything above 10MB, I've listed the output in the attached images. From the looks of it, all directories don't have anything that can be removed.

[the_rock]

Is it locally or centrally managed? Let me see if I can have a colleague get access to one customer who I believe has 1570 and I can check this for you.

Cheers mate.

[Bistro]

centrally managed

[the_rock]

Just verified on client's environment, its 1530 and locally managed. I could not find even any files in that dir bigger than 50 MBs. Honestly mate, I would contact TAC as Guenther said, better be safe than sorry. You dont want to delete an important file off the box.

Andy

 

[G_W_Albrecht]

Not really except the SKs. Reset to Defaults and importing he saved config might reduce it, but i am not sure. As this contains all your configuration / policy and the system itself it should not grow too much. As a last resort ask TAC !

[PhoneBoy]

Are you experiencing any actual issues as a result of this, or are you just looking to free up some space?
This is not meant for file storage.
USB drives can be used for additional storage and can be used for local appliance logs.

[Bistro]

Thank you for the update
As of now, we have no issues occurring but as 95% of storage is used up at points it would be good to reduce the load if possible to avoid issues in the future.

[the_rock]

I agree, so maybe TAC case would help to verify all that.

[Chris_Atkinson]

Note 1100 series appliances and R77.20.80 are End of Support since Jun-2022.

https://www.checkpoint.com/support-services/support-life-cycle-policy/

[G_W_Albrecht]

As it is centrally managed, this might help to save space there: Optimizing an IPS profile for SMB