## VSX Cluster Performance Issues Hi First off, I'm a fan of Checkmates and have learnt a lot from the site over the past few months. One particular discussion I cam across was regarding a similar issue we are now having. The discussion at [Bad Performance](https://community.checkpoint.com/thread/9945) goes through various configuration steps, which I have gone through myself. Some of these helped but we still have issues. Before I raise a TAC call, I was wondering if anyone can advise on whether there are any other configuration tweaks I can look at. Also, whether these appliances are suitable or not. So, we have 2 \* 23500 appliances with R80.10 VSX installed. There are 11 Virtual Systems (2 switches and 9 gateways) the gateways are split with 5 active on HA01 and 4 active on HA02. 64-bit mode is enabled on all VS'es and I have configured CPU affinity for all the VS'es as well. The VS in question (VS2) has CoreXL enabled with 8 instances. Affinity has been set as VS\_2: CPU 3 4 5 6 23 24 25 26 VS\_2 fwk: CPU 3 4 5 6 23 24 25 26 VS2 is active on HA01 This VS is now our default route to the Internet for all devices and users. Reports indicated there are approx 2500 users going through this VS, which should be about right, as we have approx 4000 staff in the organisation but they are not all in office at the same time. Concurrent connections is set to a max of 50000 and fw ctl pstat indicates connections fluctuate between 15000 to 20000 during the day. The VS has App control, URL Filtering, AV, AB, IPS and IA blades enabled. HTTPS inspection was enabled. When it as the F2F/PXL split was approx. 60/40 and CPU time for the FWK2 process was between 200% to 300%. With HTTPS inspection disabled, the split is not 25/75 and CPU time is between 200% an 700%. Occassionally during the day, Smartdashboard loses connection to VS2 HA01, and it sometimes gets so bad that we cannot push policy. Other VS'es are fine. During the day, the users start having issues where sites access starts getting slow, then they are unable to access sites. The browser says site is unreachable. If they wait 5-10 minutes, they can then access the site. This seems to coincide with very high CPU time (i.e. over 650%). During non-working hours, the CPU time is fine and performance is great. Sites load very quickly and there are no issues. The issues only appear during the day, a few hours after the working day starts. As Mentioned, I have gone through most of what is in Barts discussion but need a sanity check. For the number of users we have and blades enabled, is the 23500 with VSX suitable or not? Why would disabling https inspection increase CPU time? How do I find out what the FWK2 process is doing to generate such high CPU times? What other troubleshooting can I do? Apologies if this sounds long winded but if anyone can provide any assistance it would be greatly appreciated. Many thanks Roy - Tags: - [https inspection](https://community.checkpoint.com/t5/tag/https%20inspection/tg-p/board-id/general-topics) - [performance tuning](https://community.checkpoint.com/t5/tag/performance%20tuning/tg-p/board-id/general-topics) - [vsx cluster](https://community.checkpoint.com/t5/tag/vsx%20cluster/tg-p/board-id/general-topics) 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/13753?t:ac=board-id/general-topics/message-id/2293/thread-id/2293&t:cp=kudos/contributions/tapletcontributionspage&ticket=hISbdBzjWrQs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753) - [All forum topics](https://community.checkpoint.com/t5/General-Topics/bd-p/general-topics/page/374 "General Topics") - [Previous Topic](https://community.checkpoint.com/t5/General-Topics/Python-Pexpect-and-Check-Point-Gaia-Expert-Mode/td-p/52299 "Python Pexpect and Check Point Gaia Expert Mode") - [Next Topic](https://community.checkpoint.com/t5/General-Topics/IPSec-VPN-link-selection-and-static-route/td-p/52141 "IPSec VPN link selection and static route") 10 Replies [G\_W\_Albrecht](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/21294) MVP Silver ‎2018-12-0704:46 AM [Show option menu](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=2294) - [Permalink](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13754/highlight/true#M2294) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/2294/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/13754) VSX is maybe the most complicated CP product, and knowledge and experience with it are worth a lot. So i would not expect too much help here. I would rather raise a SR# with TAC asap. CCSP - CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/13754?t:ac=board-id/general-topics/message-id/2293/thread-id/2293&t:cp=kudos/contributions/tapletcontributionspage&ticket=hISbdBzjWrQs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753) [Daniel\_Taney](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/7436) Advisor ‎2018-12-0707:44 AM [Show option menu](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=2295) - [Permalink](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13755/highlight/true#M2295) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/2295/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/13755) Have you gone through your IPS profile and looked for signatures with High or Critical Performance Impact? I'd cherry pick through those and see if there are any you can disable. As far as the CPU loads go... is that Internet facing VS the highest utilized VS? Since you are using VSLS, could you try shifting some of the other VS workloads over to the other GW? R80 CCSA / CCSE 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/13755?t:ac=board-id/general-topics/message-id/2293/thread-id/2293&t:cp=kudos/contributions/tapletcontributionspage&ticket=hISbdBzjWrQs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753) [Roy\_Smith](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/18838) Collaborator ‎2018-12-0811:18 PM [Show option menu](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=2299) - [Permalink](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13759/highlight/true#M2299) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/2299/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/13759) [In response to Daniel\_Taney](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13755/highlight/true#M2295) Daniel All the high performance protections are already set to inactive. We did copy the Optimised profile and apply it to our policy. We have customised it with our own usercheck pages. Prior to sending all users through this VS, we cleared the staging , which set those in detect mode to Prevent, except for a few that we know are required for our users. Those protections originally set as inactive, are still set as inactive. Would Prevent use any more resources than Detect? This VS is the most heavily hit. All the others, are not using much CPU or memory. They generally stay very low but occassionally may get to 60-80% percent. The other VS'es have 2 Cores assigned and several share the cores, as they are very small indeed. 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/13759?t:ac=board-id/general-topics/message-id/2293/thread-id/2293&t:cp=kudos/contributions/tapletcontributionspage&ticket=hISbdBzjWrQs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753) [Timothy\_Hall](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/597) MVP Gold ‎2018-12-0708:09 AM [Show option menu](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=2296) - [Permalink](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13756/highlight/true#M2296) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/2296/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/13756) No idea why disabling HTTPS Inspection would increase CPU time, unless somehow the HTTPS Inspection is somehow being handled somewhere where you aren't measuring CPU load. I'd suggest looking at your APCL/URLF & Threat Prevention policy layers for optimization.  There is a good chance that large amounts of traffic are getting pulled into PXL and expending large amounts of CPU while there. If the slowdowns are happening often enough and lasting awhile, you can take a shortcut to help identify the cause of the slowdown.  I'm pretty sure these commands will work in VSX as long as you select the correct context first.  When the slowdowns start: ips off Wait 60 seconds then check performance, if it is suddenly much better you need to tune IPS fw amw unload Wait 60 seconds then check performance, if it is suddenly much better you need to tune your TP policy ips on fw amw fetch local If these commands didn't dramatically improve performance, you need to look at your APCL/URLF policy next.  Are you using "Any" instead of "Internet" in the Destination of any APCL/URLF rules?  Big no-no.  Do you have a cleanup rule at the end of the APCL/URLF policy like "Any Internet Any"?  You don't need it assuming the implicit cleanup rule's action is the default of Accept. There is no way unfortunately to turn off APCL/URLF on the fly like IPS/TP, only way to do that is to uncheck the product checkboxes on the firewall/cluster object and reinstall.  So that might be your next thing to try. -- Second Edition of my "Max Power" Firewall Book Now Available at [http://www.maxpowerfirewalls.com](http://www.maxpowerfirewalls.com/) New Book: "Max Power 2026" Coming Soon Check Point Firewall Performance Optimization 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/13756?t:ac=board-id/general-topics/message-id/2293/thread-id/2293&t:cp=kudos/contributions/tapletcontributionspage&ticket=hISbdBzjWrQs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753) [Roy\_Smith](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/18838) Collaborator ‎2018-12-0811:37 PM [Show option menu](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=2300) - [Permalink](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13760/highlight/true#M2300) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/2300/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/13760) [In response to Timothy\_Hall](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13756/highlight/true#M2296) Timothy I will certainly try those commands when we have the issues. We are using a unified policy with shared layers. One thing I'm trying to find out is how much extra load, if any, a shared layers would place.I would guess not much but I would like to get it confirmed. Our policy uses either "Internet" or a specific destination. There may be 1 or 2 rules with any but one my next step is to look at the policy, tidy it up and probably strip it back, to see if it improves. 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/13760?t:ac=board-id/general-topics/message-id/2293/thread-id/2293&t:cp=kudos/contributions/tapletcontributionspage&ticket=hISbdBzjWrQs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753) [Timothy\_Hall](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/597) MVP Gold ‎2018-12-0907:02 AM [Show option menu](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=2302) - [Permalink](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13762/highlight/true#M2302) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/2302/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/13762) [In response to Roy\_Smith](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13760/highlight/true#M2300) As far as IPS, protections in Detect mode use more CPU than those in Prevent mode. Inline/Shared/Unified policy layers don't usually make a huge difference as far as gateway performance when compared to ordered layers.  However when utilizing inline layers it is recommended to specify only simple services (http, https, ftp, etc.) in the top-level parent rules, then invoke applications/categories in the sub-layers if possible.  This helps maximize the effect of Column-based matching which can result in sizable rulebase lookup performance gains. SIC error 148 is just a simple timeout, so that would just seem to indicate very high CPU load. -- Second Edition of my "Max Power" Firewall Book Now Available at [http://www.maxpowerfirewalls.com](http://www.maxpowerfirewalls.com/) New Book: "Max Power 2026" Coming Soon Check Point Firewall Performance Optimization 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/13762?t:ac=board-id/general-topics/message-id/2293/thread-id/2293&t:cp=kudos/contributions/tapletcontributionspage&ticket=hISbdBzjWrQs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753) [PhoneBoy](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/7) Admin ‎2018-12-0711:19 AM [Show option menu](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=2297) - [Permalink](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13757/highlight/true#M2297) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/2297/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/13757) Are you running in 32bit VS mode or 64bit? With a larger VS, you could probably benefit from increasing the amount of memory a VS can use (which is limited to 4GB in 32bit mode). 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/13757?t:ac=board-id/general-topics/message-id/2293/thread-id/2293&t:cp=kudos/contributions/tapletcontributionspage&ticket=hISbdBzjWrQs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753) [Roy\_Smith](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/18838) Collaborator ‎2018-12-0811:11 PM [Show option menu](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=2298) - [Permalink](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13758/highlight/true#M2298) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/2298/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/13758) [In response to PhoneBoy](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13757/highlight/true#M2297) Everything is running in 64-bit. This was annoying when we first tested out the cluster it kept flapping but w=once we ran vs\_bits 64, it was good after  that. Memory  is good as barely less than 50% of physical and virtual memory is being used. 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/13758?t:ac=board-id/general-topics/message-id/2293/thread-id/2293&t:cp=kudos/contributions/tapletcontributionspage&ticket=hISbdBzjWrQs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753) [Roy\_Smith](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/18838) Collaborator ‎2018-12-0811:49 PM [Show option menu](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=2301) - [Permalink](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13761/highlight/true#M2301) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/2301/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/13761) Thanks guys for the replies. This issue gets a bit hairy, as we over 2000 users complaining about internet performance. Once thing I have noticed is that some one member, HA01 which is the active member for this problematic VS, is a having difficulty getting out to do the Ant-bit updates. The AV updates are fine and the other member is fine. I also see the same message | | | --- | | | | | --- | | "Error: Update failed. Contract entitlement check failed. Could not reach "updates.checkpoint.com". Check proxy configuration on the gateway." | | | | Appear on this VS and 3 other VS'es. The strange thing is the other 3 VS'es are active on HA02 but it is still HA01 that complains about the update. All other VS'es active on HA01 are fine. I had assumed through the week this was just down to the apparent resource issues I've been seeing. However, the update issue is still over the weekend when 99% of staff are not working. I've gone through the usual SK articles with no success. It may be some other tweak I made so I'm trying to backtrack what I have changed to see. One other thing I noticed, is when the VS was struggling, we would see "sic error (148)" when trying to push policy, so this made making any changes very difficult to apply. I'm going through all these trying issues, as I believe they are symptoms of the same problem but I'm struggling to work it out. 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/13761?t:ac=board-id/general-topics/message-id/2293/thread-id/2293&t:cp=kudos/contributions/tapletcontributionspage&ticket=hISbdBzjWrQs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753) [TusharPatel](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/28797) Explorer ‎2019-05-0102:42 PM [Show option menu](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=10364) - [Permalink](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/52352/highlight/true#M10364) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/10364/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/52352) Roy, Just wondering, How the performance issues resolved for you? As Timonthy commented, IPS in detect mode consumes more CPU then Prevent mode, Did you made those changes? 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/52352?t:ac=board-id/general-topics/message-id/2293/thread-id/2293&t:cp=kudos/contributions/tapletcontributionspage&ticket=hISbdBzjWrQs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753) Post Reply Leaderboard Epsum factorial non deposit quid pro quo hic escorol. | User | Count | | --- | --- | |
[israelfds95](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/93117) | 13 | |
[HeikoAnkenbrand](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/21670) | 7 | |
[simonemantovani](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/79070) | 5 | |
[emmap](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/71054) | 3 | |
[Steffen\_Appel](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/10477) | 2 | |
[Kaspars\_Zibarts](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456) | 1 | |
[Alex-](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/10384) | 1 | |
[Danny](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/687) | 1 | |
[Bob\_Zimmerman](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/27871) | 1 | |
[DH](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/25118) | 1 | [View All ≫](https://community.checkpoint.com/t5/forums/kudosleaderboardpage/board-id/general-topics/timerange/one_month/page/1/tab/authors) Trending Discussions [Five Habits That Improved My Check Point Deployments](https://community.checkpoint.com/t5/General-Topics/Five-Habits-That-Improved-My-Check-Point-Deployments/td-p/279760) [Automatically Renew VPN Certificates](https://community.checkpoint.com/t5/General-Topics/Automatically-Renew-VPN-Certificates/td-p/279072) [Snapshot and /boot disk space full](https://community.checkpoint.com/t5/General-Topics/Snapshot-and-boot-disk-space-full/td-p/280183) Upcoming Events Sort by: - [All](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753#) - [Virtual](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753#) - [In-Person](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753#) [Virtual](https://community.checkpoint.com/labels/Virtual) Tue 28 Jul 2026 @ 11:00 AM (EDT) [Under the Hood - Check Point and Illumio – Modern Network Defense Against AI-Based Threats](https://community.checkpoint.com/t5/CheckMates-Events/Under-the-Hood-Check-Point-and-Illumio-Modern-Network-Defense/ev-p/279701) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 12:00 PM (SGT) [The AI Security Report 2026: A Turning Point for Enterprise Defense - SGT](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280019) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 02:00 PM (IDT) [The AI Security Report 2026: A Turning Point for Enterprise Defense - AMER](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280021) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 03:00 PM (CEST) [The AI Security Report 2026: A Turning Point for Enterprise Defense EMEA](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280020) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 11:00 AM (EDT) [TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370) Thu 30 Jul 2026 @ 11:30 AM (CDT) [CheckMates Live DFW: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/CheckMates-Live-DFW-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279920) [Virtual](https://community.checkpoint.com/labels/Virtual) Tue 28 Jul 2026 @ 11:00 AM (EDT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 12:00 PM (SGT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 02:00 PM (IDT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 03:00 PM (CEST) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 11:00 AM (EDT) [TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370) [Virtual](https://community.checkpoint.com/labels/Virtual) Thu 30 Jul 2026 @ 10:00 AM (PDT) [AI Security Masters E12: READY OR NOT: Securing the AI Enterprise 4/5 - AI Gateway](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Masters-E12-READY-OR-NOT-Securing-the-AI-Enterprise/ev-p/277411) [In-Person](https://community.checkpoint.com/labels/In-Person) Tue 11 Aug 2026 @ 11:30 AM (EDT) [New York City: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/New-York-City-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279476) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 13 Aug 2026 @ 11:30 AM (EDT) [Waltham, MA: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/Waltham-MA-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279475) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 20 Aug 2026 @ 08:30 AM (COT) [Medellin: Workspace Evolution: Hybrid Mesh Management - Visibilidad, Automatización e IA](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Evolution-Hybrid-Mesh-Management-Visibilidad/ev-p/280003) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 20 Aug 2026 @ 06:00 PM (COT) [Medellin: Workspace Intelligence: IA Generativa en Acción para Equipos de Seguridad](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Intelligence-IA-Generativa-en-Acci%C3%B3n-para/ev-p/280004) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 27 Aug 2026 @ 09:00 AM (CEST) [Check Point Hands-On SASE and Cloud Workshop - Zurich](https://community.checkpoint.com/t5/CheckMates-Events/Check-Point-Hands-On-SASE-and-Cloud-Workshop-Zurich/ev-p/279914) [In-Person](https://community.checkpoint.com/labels/In-Person) Wed 21 Oct 2026 @ 09:00 AM (BST) [AI Security Workshop - Glasgow](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Workshop-Glasgow/ev-p/278505) [CheckMates Events](https://community.checkpoint.com/t5/CheckMates-Events/eb-p/events) [Top](https://community.checkpoint.com/t5/General-Topics/VSX-Cluster-Performance-Issues/m-p/13753) About CheckMates - [Getting Started & FAQ](https://community.checkpoint.com/t5/help/faqpage) - [Community Guidelines](https://community.checkpoint.com/t5/user/TermsOfServicePage) Learn Check Point - [Check Point for Beginners](https://community.checkpoint.com/t5/Check-Point-for-Beginners-2-0/bg-p/check-point-for-beginners-2-0) - [Check Point Trivia](https://community.checkpoint.com/t5/Check-Point-Trivia/bg-p/trivia) - [CheckFlix Videos](https://community.checkpoint.com/t5/CheckFlix/ct-p/checkflix) Advanced Learning - [Check Point Security Masters](https://community.checkpoint.com/t5/Check-Point-Security-Masters/gp-p/ccsm) - [Tip of the Week](https://community.checkpoint.com/t5/SecureKnowledge-Tip-of-the-Week/bg-p/secureknowledge) - [TechTalks](https://community.checkpoint.com/t5/TechTalks/ct-p/techtalks%20role=) - [Training and Certification](https://community.checkpoint.com/t5/Training-and-Certification/bd-p/training-and-certification) Resources - [CheckMates Toolbox](https://community.checkpoint.com/t5/CheckMates-Toolbox/ct-p/CheckMatesToolbox) - [Developers (Code Hub)](https://community.checkpoint.com/t5/Developers-API-CLI/bd-p/codehub) - [Product Announcements](https://community.checkpoint.com/t5/Product-Announcements/bg-p/products-blog) - [Upcoming Events](https://community.checkpoint.com/t5/Upcoming-Events/bg-p/checkmates-live) Non-English Discussions - [Español](https://community.checkpoint.com/t5/Espa%C3%B1ol/bd-p/spanish) - [French](https://community.checkpoint.com/t5/Fran%C3%A7ais/bd-p/francais) - [Japanese](https://community.checkpoint.com/t5/Japanese-%E6%97%A5%E6%9C%AC%E8%AA%9E/bd-p/Japanese) - [Português](https://community.checkpoint.com/t5/Portugu%C3%AAs/bd-p/portuguese) - [Russian](https://community.checkpoint.com/t5/Russian/bd-p/russian) - [Chinese](https://community.checkpoint.com/t5/Chinese/bd-p/taiwan) YOU DESERVE THE BEST SECURITY We’re Social. Follow Us [CheckMates on LinkedIn](http://linkedin.com/company/cpcheckmates) [Check Point on YouTube](https://www.youtube.com/user/CPGlobal) [CheckMates on Facebook](https://www.facebook.com/cpcheckmates/) [CheckMates on Instagram](https://www.instagram.com/cpcheckmates/) ©1994-2026 Check Point Software Technologies Ltd. All rights reserved. [Copyright](https://www.checkpoint.com/copyright/) [Privacy Policy](https://www.checkpoint.com/privacy/) [About Us](https://www.checkpoint.com/about-us/) [UserCenter](https://usercenter.checkpoint.com/) Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.