- Products
- Learn
- Local User Groups
- Partners
- More
Call For Papers
Your Expertise, Our Stage
Ink Dragon: A Major Nation-State Campaign
Watch HereAI Security Masters E5:
Powering Prevention: The AI Driving Check Point’s ThreatCloud
The Great Exposure Reset
AI Security Masters E4:
Introducing Cyata, Securing the Agentic AI Era
CheckMates Go:
CheckMates Fest
Currently, my SMB(1550, R81.10.15) appliance is using too much memory. However, even when I check with top, I can't figure out which process is causing the high memory usage.
Could you please let me know what might be causing it?
No worry ! Let us look at the .lua Script in detail to learn more about the performed steps ! The script first checks for Smart-1 Cloud / Central Management:
printWarn("Centrally-managed mode. Skipping the disabling of IoT, SD-WAN, SmartAccel, Hit Count, and Privacy Settings")
All these steps are left out - so the SK is somewhat misleading ! So next, in script gw_optimizer_V12.lua probing will be disabled - you need to use the script gw_optimizer_V12_no_probing.lua so probing settings will be unchanged ! Next step sounds good.
increase sfwd RAM for 1600 and later
Sounds good ! Then:
disable batchReognition.lua script
and restart the main process:
sfwd restart
Now for a dessert:
create bg script for pfrm cleaning (and a correspoinding script to stop it)
This will add cleaning to userScript.
printSucc("gw_optimizer_bg.sh was created to periodically clean the /pfrm2.0 directory (run '/storage/gw_optimizer/gw_optimizer_stop.sh' to stop it)")
So you can use this without fear i think...
I strongly recommend you to upgrade to the latest R81.10.17 which includes a lot of fixes including performance optimization for the 15X0 appliances (2GB RAM models). Try checking the usage after upgrade, and if you still experience high memory, you might want to engage with TAC for further troubleshoot.
p.s.
I hope someone can kindly move this to the Spark (SMB) section 🙂
Thank you for letting me know! By the way, is there a big difference before and after the upgrade? I feel like I should keep the upgrade as a last resort.
You might also wish to explore the script in sk183290 - Optimizer Script for Quantum Spark Gateways 1500 series .
Thank you for the information. I have a few questions. In the SK document, it says to disable features like IoT, SD-WAN, Smart Accel, IoT Statistics, Device information logging, Hit Count, Privacy Settings, Logging of allowed traffic, Probing in Internet connections (depending on the script), and Batch recognition to decrease CPU and memory usage.
Does this mean that disabling these features will reduce resource consumption?
Yes.
We current don’t use IoT, SD-WAN, IoT Statistics blades but the others can’t disable
e.g. Hit Count is not relevant here, i would think. I suggest to run the script an then enable the absolutely needed features again...
Since we're currently using Smart-1 Cloud, there are limitations on what we can optimize directly on the appliance.
No worry ! Let us look at the .lua Script in detail to learn more about the performed steps ! The script first checks for Smart-1 Cloud / Central Management:
printWarn("Centrally-managed mode. Skipping the disabling of IoT, SD-WAN, SmartAccel, Hit Count, and Privacy Settings")
All these steps are left out - so the SK is somewhat misleading ! So next, in script gw_optimizer_V12.lua probing will be disabled - you need to use the script gw_optimizer_V12_no_probing.lua so probing settings will be unchanged ! Next step sounds good.
increase sfwd RAM for 1600 and later
Sounds good ! Then:
disable batchReognition.lua script
and restart the main process:
sfwd restart
Now for a dessert:
create bg script for pfrm cleaning (and a correspoinding script to stop it)
This will add cleaning to userScript.
printSucc("gw_optimizer_bg.sh was created to periodically clean the /pfrm2.0 directory (run '/storage/gw_optimizer/gw_optimizer_stop.sh' to stop it)")
So you can use this without fear i think...
Sorry for the late reply, and thank you so much for your help. I’ll keep this in mind when I work on it later!
Did you try run below?
Andy
Are you perhaps talking about installing Dr. Spark report?
Correct.
I downloaded the report and reviewed it, and it also shows that the memory usage is high
I would open TAC case and have them review it as well.
Andy
thank you for you help
As the guys suggested, maybe upgrade to latest version, hope that helps.
Andy
When you review sk183153 R81.10.17 for Quantum Spark Appliances you'll see some similarities to the script shared with respect to optimizations.
Beyond that you may need to work with TAC or your SE if there are specific sizing concerns that persist.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 8 | |
| 7 | |
| 4 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 |
Tue 17 Mar 2026 @ 03:00 PM (CET)
From SASE to Hybrid Mesh: Securing Enterprise AI at Scale - EMEATue 17 Mar 2026 @ 02:00 PM (EDT)
From SASE to Hybrid Mesh: Securing Enterprise AI at Scale - AMERWed 18 Mar 2026 @ 10:00 AM (CET)
The Cloud Architects Series: An introduction to Check Point Hybrid Mesh in 2026 - In Seven LanguagesThu 19 Mar 2026 @ 11:00 AM (EDT)
Tips and Tricks 2026 #2: AI Security Challenges and SolutionsTue 17 Mar 2026 @ 03:00 PM (CET)
From SASE to Hybrid Mesh: Securing Enterprise AI at Scale - EMEATue 17 Mar 2026 @ 02:00 PM (EDT)
From SASE to Hybrid Mesh: Securing Enterprise AI at Scale - AMERWed 18 Mar 2026 @ 10:00 AM (CET)
The Cloud Architects Series: An introduction to Check Point Hybrid Mesh in 2026 - In Seven LanguagesThu 19 Mar 2026 @ 11:00 AM (EDT)
Tips and Tricks 2026 #2: AI Security Challenges and SolutionsTue 24 Mar 2026 @ 04:00 PM (CET)
Maestro Masters EMEA: Hyperscale Firewall Architectures and OptimizationTue 24 Mar 2026 @ 06:00 PM (COT)
San Pedro Sula: Spark Firewall y AI-Powered Security ManagementThu 26 Mar 2026 @ 06:00 PM (COT)
Tegucigalpa: Spark Firewall y AI-Powered Security ManagementAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY