- Products
- Learn
- Local User Groups
- Partners
- More
MVP 2026: Submissions
Are Now Open!
What's New in R82.10?
Watch NowOverlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
Hello,
I have HA VSA with 4 VS (2-5) and CoreXL disabled.
My Question is: Will each VS use only one CPU for Fw workers ?From what I can see (cpview per vs and top) each VS is using 3 cores. I thought that with CoreXL disabled each VS will use only one CPU.
Can somebody explain me how it works, please?
Checkpoint 15400 16 CPU cores
R80.40 latest hotfix
IPSEC/IPS/Anti-bot enabled on one VS (4)
MQ enabled
no manual affinities
[Expert@FIREWALL]# fw ctl affinity -l
VS_0 fwk: CPU 2 3 4 5 6 7 10 11 12 13 14 15
VS_2 fwk: CPU 2 3 4 5 6 7 10 11 12 13 14 15
VS_3 fwk: CPU 2 3 4 5 6 7 10 11 12 13 14 15
VS_4 fwk: CPU 2 3 4 5 6 7 10 11 12 13 14 15
VS_5 fwk: CPU 2 3 4 5 6 7 10 11 12 13 14 15
Interface eth3-01: has multi queue enabled
Interface eth3-02: has multi queue enabled
Interface Mgmt: has multi queue enabled
Interface Sync: has multi queue enabled
[Expert@FIREWALL]#
[Expert@FIREWALL]# mq_mng --show
Total 16 cores. Multiqueue 4 cores
i/f type state mode cores
------------------------------------------------------------------------------------------------
Mgmt igb Up Auto (2/2) 0,8
Sync igb Up Auto (2/2) 0,8
eth3-01 ixgbe Up Auto (4/4) 0,8,1,9
eth3-02 ixgbe Up Auto (4/4) 0,8,1,9
[Expert@FIREWALL]#
[Expert@FIREWALL]# fw ctl multik stat
CoreXL is disabled << on ALL 4 VS
You need to specify how many FW cores a VS use on SmartConsole. Before that, anything on CLI is pointless. What do you expect for each VS?
I got just such FW configured and I am wondering how VSX is working when CoreXL is disabled. Just general knowledge. Is it sharing all FWK CPUs for all 4 VS+VS0 or those outputs (fw ctl, cpview) are useless. It is confusing me. I would expect to see 8CPU 100% idle.
I know how it's behaving with CoreXL enabled .
Some context would help, what are you attempting to achieve and why?
As far as I understood CoreXL is only effective for VS0. For all other VSes you can specify the number of cores for IPv4 and IPv6 separately in the CoreXL-Tab of the VS object in SmartConsole – as Val mentioned.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 19 | |
| 17 | |
| 14 | |
| 8 | |
| 7 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 |
Tue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsTue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY