There are two different types of processes: those that run in the kernel, and those that run in userspace.
CPU levels are typically commensurate with the amount of traffic the gateway is passing.
To figure out exactly what’s causing the CPU to increase, we’d probably need (as a starting point) the output of the Super Seven commands: https://community.checkpoint.com/t5/Scripts/S7PAC-Super-Seven-Performance-Assessment-Commands/m-p/40...
Based on what those say, we can determine what needs to occur.
CPU and Memory are both needed for any computing platform to function.
You need a certain amount of both to be available to perform inspection on traffic.
To ensure I’m answering the question with the right context, please provide a screenshot that prompted the question.
