High CPU utilization during process fwk7_dev_0

[Arturxr]

We have the output of the top 265% cpu command on the fwk7_dev_0 process, CheckPoint VSX version 80.40, the output of the cpprod_utel FwIsUsermode command shows "1" after reading: https://community.checkpoint.com/t5/General-Topics/High-CPU-utilization-during-process-fwk0-dev-0-UM...

https://community.checkpoint.com/t5/General-Topics/R80-x-Performance-Tuning-Tip-User-Mode-Firewall-v...

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

any questions, can I switch the firewall to kernel mode on my checkpoint?

[Oliver_Fink]

As far as I understand the concept, VSX runs in user mode only.

The process running with more than 100 % is quite normal. You have to assign enough cores to this VS to handle this amount of CPU usage. With 265 % this VS needs a minimum(!) of 3 cores assigned in SmartConsole to handle this traffic correctly. I personally, would assign much more to have some CPU in reserve. 

[Arturxr]

tell me how to do it in smart console?

[JanVC]

the VS already has at least 3 cores assigned, otherwise it wouldn't be able to reach 265%

in top press shift + h to split the fwk_dev process into individual processes

increasing the core count for a vs is done on the vs object properties in the smartconsole (watch out for downtime when changing this)

[Oliver_Fink]

You are right. I just wanted to address that 265 is not a malfunction, but has to be seen in correlation to the assigned cores of the VS.

[Oliver_Fink]

Select the VS in SmartConsole, select CoreXL from the menu and assign the cores for IPv4 (and IPv6 if needed). Please notice the informational remark that changing the number of cores will result in a downtime of the corresponding VS! Consider in maintenance window for that change.

[PhoneBoy]

The explicit settings for UserMode only apply in a non-VSX setting.
VSX only operates in UserMode.