## Bad Performance

We recently moved from OpenServers to VSX Clusters and now performance is really bad. Traffic to the internet is terrible.

People working over VPN can't hardly work. We just don't know were to look anymore. we are on R80.10 take 121.

Clusters are 15600 and 23500 models.

Has anybody any idea were to look?

[6\\
\\
\\
Kudos](https://community.checkpoint.com/t5/kudos/messagepage/board-id/general-topics/message-id/7815/tab/all-users "Click here to see who gave kudos to this post.")

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37091?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

- [All forum topics](https://community.checkpoint.com/t5/General-Topics/bd-p/general-topics/page/421 "General Topics")
- [Previous Topic](https://community.checkpoint.com/t5/General-Topics/A-contradiction-in-Mobile-Access-Reverse-Proxy-sk/td-p/16587 "A contradiction in Mobile Access Reverse Proxy sk")
- [Next Topic](https://community.checkpoint.com/t5/General-Topics/details-on-upcoming-SPLUNK-logging-agent/td-p/15963 "details on upcoming SPLUNK logging agent")

60 Replies

[Hsu\_Teddy](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/2116)

Participant

‎2018-10-1902:32 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7816)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37092/highlight/true#M7816)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7816/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37092)

The VS on the VSX cluster is default using 1 CPU core.

For more performance , you need to increase the number of core.

To configure CoreXL on a Virtual System:

1. Open SmartConsole.
2. From the Gateways & Servers view or Object Explorer, double-click the **Virtual System**.
The **Virtual System General Properties** window opens.

3. From the navigation tree, select **CoreXL**.
4. Select the number of firewall instances for the Virtual System.
5. Click **OK**.

[Check Point VSX R80.10 Administration Guide](https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_VSX_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/CP_R80.10_VSX_AdminGuide/5997 "https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_VSX_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/CP_R80.10_VSX_AdminGuide/5997")

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37092?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Bart\_Leysen](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/19742)

Contributor

‎2018-10-1906:38 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7820)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37096/highlight/true#M7820)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7820/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37096)

[In response to Hsu\_Teddy](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37092/highlight/true#M7816)

we assigned 10 firewall instances to that VS

and we assigned 10 CPU's to this VS dedicated.

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37096?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[AlekseiShelepov](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/6022)

Advisor

‎2018-10-1902:35 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7817)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37093/highlight/true#M7817)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7817/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37093)

More information is required here.

What blades are enabled? Might be it's something connected with additional blades enabled for all traffic.

What you can see in top command output, what processes are using most of CPU?

Try to start with Super Seven commands from [Tim Hall's presentation](https://community.checkpoint.com/videos/7987), they are integrated in [Common Check Point Commands (ccc)](https://community.checkpoint.com/docs/DOC-2214) under Gateway Performance Optimization section.

[3\\
\\
\\
Kudos](https://community.checkpoint.com/t5/kudos/messagepage/board-id/general-topics/message-id/7817/tab/all-users "Click here to see who gave kudos to this post.")

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37093?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Bart\_Leysen](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/19742)

Contributor

‎2018-10-1906:39 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7821)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37097/highlight/true#M7821)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7821/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37097)

[In response to AlekseiShelepov](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37093/highlight/true#M7817)

Next blades are enabled ips, anti-virus/anti-bot, URL filterening, application and VPN

I will watch the super Seven commans, thanks

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37097?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Kaspars\_Zibarts](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456)

MVP Gold CHKP

‎2018-10-1903:15 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7818)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37094/highlight/true#M7818)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7818/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37094)

Can you send output of

fw ctl affinity -l

fw ctl multik stat

cpmq get

top (extended to see all individual cores)

[4\\
\\
\\
Kudos](https://community.checkpoint.com/t5/kudos/messagepage/board-id/general-topics/message-id/7818/tab/all-users "Click here to see who gave kudos to this post.")

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37094?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Bart\_Leysen](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/19742)

Contributor

‎2018-10-1906:48 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7822)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37098/highlight/true#M7822)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7822/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37098)

[In response to Kaspars\_Zibarts](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37094/highlight/true#M7818)

top - 15:46:46 up 1 day, 23:20,  2 users,  load average: 4.14, 4.61, 5.00

Tasks: 519 total,   1 running, 518 sleeping,   0 stopped,   0 zombie

Cpu(s):  7.6%us,  1.5%sy,  0.0%ni, 89.6%id,  0.0%wa,  0.1%hi,  1.2%si,  0.0%st

Mem:  131774100k total, 19940328k used, 111833772k free,   389664k buffers

Swap: 33551672k total,        0k used, 33551672k free, 11931140k cached

PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND

6069 admin      0 -20 2653m 2.1g 178m S  379  1.6   5724:45 fwk2\_dev

13600 admin     15   0  716m 227m  40m S    7  0.2   7:40.63 fw\_full

13598 admin     15   0  292m  75m  39m S    1  0.1   0:50.09 cpd

2952 admin      0 -20  710m 179m  31m S    1  0.1  22:39.70 fwk0\_dev

3845 admin     15   0  365m 342m  10m S    1  0.3   4:17.23 rad

6071 admin      0 -20 1267m 734m  99m S    1  0.6  35:17.06 fwk1\_dev

3163 admin     15   0  286m  74m  44m S    0  0.1   0:24.01 cpd

3503 admin     15   0  615m 100m  41m S    0  0.1   0:40.87 fw\_full

12837 admin     15   0  292m  75m  39m S    0  0.1   0:30.06 cpd

12839 admin     15   0  563m  72m  40m S    0  0.1   0:04.51 fw\_full

1 admin     15   0  1976  724  624 S    0  0.0   0:04.91 init

2 admin     RT  -5     0    0    0 S    0  0.0   0:00.04 migration/0

3 admin     15   0     0    0    0 S    0  0.0   0:00.00 ksoftirqd/0

4 admin     RT  -5     0    0    0 S    0  0.0   0:00.00 watchdog/0

5 admin     RT  -5     0    0    0 S    0  0.0   0:00.00 migration/1

6 admin     15   0     0    0    0 S    0  0.0   0:00.00 ksoftirqd/1

7 admin     RT  -5     0    0    0 S    0  0.0   0:00.00 watchdog/1

8 admin     RT  -5     0    0    0 S    0  0.0   0:15.59 migration/2

9 admin     15   0     0    0    0 S    0  0.0   0:00.00 ksoftirqd/2

10 admin     RT  -5     0    0    0 S    0  0.0   0:00.00 watchdog/2

11 admin     RT  -5     0    0    0 S    0  0.0   3:14.68 migration/3

12 admin     15   0     0    0    0 S    0  0.0   0:00.00 ksoftirqd/3

13 admin     RT  -5     0    0    0 S    0  0.0   0:00.00 watchdog/3

14 admin     RT  -5     0    0    0 S    0  0.0   0:05.87 migration/4

15 admin     15   0     0    0    0 S    0  0.0   0:00.00 ksoftirqd/4

16 admin     RT  -5     0    0    0 S    0  0.0   0:00.00 watchdog/4

17 admin     RT  -5     0    0    0 S    0  0.0   0:08.82 migration/5

18 admin     15   0     0    0    0 S    0  0.0   0:00.00 ksoftirqd/5

19 admin     RT  -5     0    0    0 S    0  0.0   0:00.00 watchdog/5

20 admin     RT  -5     0    0    0 S    0  0.0   0:02.10 migration/6

21 admin     15   0     0    0    0 S    0  0.0   0:00.00 ksoftirqd/6

22 admin     RT  -5     0    0    0 S    0  0.0   0:00.00 watchdog/6

23 admin     RT  -5     0    0    0 S    0  0.0   0:04.03 migration/7

24 admin     15   0     0    0    0 S    0  0.0   0:00.00 ksoftirqd/7

25 admin     RT  -5     0    0    0 S    0  0.0   0:00.00 watchdog/7

26 admin     RT  -5     0    0    0 S    0  0.0   0:06.17 migration/8

27 admin     15   0     0    0    0 S    0  0.0   0:00.00 ksoftirqd/8

28 admin     RT  -5     0    0    0 S    0  0.0   0:00.00 watchdog/8

29 admin     RT  -5     0    0    0 S    0  0.0   0:52.68 migration/9

\[Expert@vsx-lvn-pub2:0\]# fw ctl multik stat

fw: CoreXL is disabled

\[Expert@vsx-lvn-pub2:0\]# cpmq get

Active ixgbe interfaces:

eth1-01 \[Off\]

eth1-02 \[Off\]

eth1-03 \[Off\]

eth1-04 \[Off\]

Active igb interfaces:

Mgmt \[Off\]

Sync \[Off\]

eth2-01 \[Off\]

\[Expert@vsx-lvn-pub2:0\]# fw ctl affinity -l

Mgmt: CPU 0

Sync: CPU 0

eth1-01: CPU 1 2

eth1-02: CPU 3 4

eth1-03: CPU 5 6

eth1-04: CPU 7 8

eth2-01: CPU 9 10

VS\_0: CPU 39

VS\_0 fwk: CPU 39

VS\_1: CPU 11 12 13 14 15 16 17 18 19 20

VS\_1 fwk: CPU 11 12 13 14 15 16 17 18 19 20

VS\_2: CPU 21 22 23 24 25 26 27 28 29 30

VS\_2 fwk: CPU 21 22 23 24 25 26 27 28 29 30

VS\_3 fwk: CPU 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37098?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[\_Val\_](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/181)

Admin

‎2018-10-1904:55 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7819)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37095/highlight/true#M7819)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7819/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37095)

First question you need to ask yourself, how many core per VS are enabled? If more than one, what are affinity settings?

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37095?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Bart\_Leysen](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/19742)

Contributor

‎2018-10-1906:50 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7823)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37099/highlight/true#M7823)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7823/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37099)

[In response to \_Val\_](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37095/highlight/true#M7819)

VS 2 is the VS with issues

Mgmt: CPU 0

Sync: CPU 0

eth1-01: CPU 1 2

eth1-02: CPU 3 4

eth1-03: CPU 5 6

eth1-04: CPU 7 8

eth2-01: CPU 9 10

VS\_0: CPU 39

VS\_0 fwk: CPU 39

VS\_1: CPU 11 12 13 14 15 16 17 18 19 20

VS\_1 fwk: CPU 11 12 13 14 15 16 17 18 19 20

VS\_2: CPU 21 22 23 24 25 26 27 28 29 30

VS\_2 fwk: CPU 21 22 23 24 25 26 27 28 29 30

VS\_3 fwk: CPU 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37099?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Kaspars\_Zibarts](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456)

MVP Gold CHKP

‎2018-10-2012:23 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7827)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37103/highlight/true#M7827)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7827/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37103)

[In response to Bart\_Leysen](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37099/highlight/true#M7823)

Hi Bart! Your core allocation is set wrong. You are using hyperthreaded CPUs so you have to be mindful about numbering!

You have allocated the same physical cores to SecureXL on interfaces (0-10) and VS2 (matching sibling cores 20-30)

Pls have a look at the article i wrote not that long ago

[Security Gateway Performance Optimization - VSX](https://community.checkpoint.com/thread/9707)

Make your own spreadsheet and re-allocate cores correctly.

Note that having 2 CPUs per interface is not going to help you unless you use multiqueue - may as well stick with singe CPU per interface.

In your case I would do like this to start with and then tweak depending on CPU usage

Mgmt: CPU 0

Sync: CPU 0

eth1-01: CPU 1 (21)

eth1-02: CPU 2 (22)

eth1-03: CPU 3 (23)

eth1-04: CPU 4 (24)

eth2-01: CPU 5 (25)

VS\_0: CPU 6 26

VS\_0 fwk: CPU 6 26

VS\_1: CPU 10 11 12 13 14 30 31 32 33 34

VS\_1 fwk: CPU 10 11 12 13 14 30 31 32 33 34

VS\_2: CPU 15 16 17 18 19 35 36 37 38 39

VS\_2 fwk: CPU 15 16 17 18 19 35 36 37 38 39

VS\_3 fwk: CPU 7 8 9 27 28 29

Or design your own but make sure you take into account hyper threaded numbering. i.e Physical core 0 also holds hyperthreaded core 20 so don't mix SecureXL and CoreXL on those!

[3\\
\\
\\
Kudos](https://community.checkpoint.com/t5/kudos/messagepage/board-id/general-topics/message-id/7827/tab/all-users "Click here to see who gave kudos to this post.")

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37103?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Kaspars\_Zibarts](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456)

MVP Gold CHKP

‎2018-10-2012:26 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7828)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37104/highlight/true#M7828)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7828/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37104)

[In response to Kaspars\_Zibarts](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37103/highlight/true#M7827)

Let us know if you need more info or commands to set affinities

And remember to press 1 when you do top command so you see all individual cores not just summary

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37104?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Bart\_Leysen](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/19742)

Contributor

‎2018-10-2001:31 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7829)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37105/highlight/true#M7829)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7829/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37105)

[In response to Kaspars\_Zibarts](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37104/highlight/true#M7828)

Thanks Kaspars,

I've read your article it was very helpfull, i've modified the affinity following your guidelines.

I will keep you posted next week when production starts again on monday.

[1\\
\\
\\
Kudo](https://community.checkpoint.com/t5/kudos/messagepage/board-id/general-topics/message-id/7829/tab/all-users "Click here to see who gave kudos to this post.")

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37105?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Kaspars\_Zibarts](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456)

MVP Gold CHKP

‎2018-10-2001:36 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7830)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37106/highlight/true#M7830)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7830/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37106)

[In response to Bart\_Leysen](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37105/highlight/true#M7829)

Btw, I had to guess-work some things, so ideally send us fw ctl multik stat command output to confirm that suggested config will work ok.

Also if you have possibility, set up some sort of SNMP graphs for all CPU cores to further fine tune your CoreXL and SXL

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37106?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Kaspars\_Zibarts](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456)

MVP Gold CHKP

‎2018-10-2001:37 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7831)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37107/highlight/true#M7831)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7831/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37107)

[In response to Kaspars\_Zibarts](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37106/highlight/true#M7830)

You also would have to adjust allocation depending on total number of cores. My example was for 40 HT cores

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37107?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Bart\_Leysen](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/19742)

Contributor

‎2018-10-2001:54 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7833)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37109/highlight/true#M7833)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7833/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37109)

[In response to Kaspars\_Zibarts](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37107/highlight/true#M7831)

What is you experience with multique? Is it advisable to enable it on some interfaces?

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37109?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Timothy\_Hall](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/597)

MVP Gold

‎2018-10-2005:44 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7834)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37110/highlight/true#M7834)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7834/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37110)

[In response to Bart\_Leysen](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37109/highlight/true#M7833)

If the RX-DRP rate on a busy interface is >0.1% (viewed with **netstat -ni**) even enough SND/IRQ cores have been allocated such that the busy interface has its own dedicated SND/IRQ core as shown by **sim affinity -l**, then Multi-Queue should be enabled.  Multi-Queue does cause some slight additional overhead on the SND/IRQ core to "stick" the packets associated with a single connection to the same queue every time to avoid out of order delivery, so enabling Multi-Queue is not always a no-brainer.  More SND/IRQ cores should be allocated first if possible.  Specifically if all SND/IRQ cores are very busy (>75% utilization) and you can't allocate any more due to a limited number of cores, enabling Multi-Queue will actually make things _worse_.

--

Second Edition of my "Max Power" Firewall Book

Now Available at [http://www.maxpowerfirewalls.com](http://www.maxpowerfirewalls.com/)

New Book: "Max Power 2026" Coming Soon

Check Point Firewall Performance Optimization

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37110?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Bart\_Leysen](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/19742)

Contributor

‎2018-10-2001:44 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7832)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37108/highlight/true#M7832)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7832/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37108)

[In response to Kaspars\_Zibarts](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37106/highlight/true#M7830)

output of fw ctl multik stat after the change

\[Expert@vsx-lvn-pub2:2\]# fw ctl multik stat

ID \| Active \| CPU \| Connections \| Peak

\-\-\--------------------------------------------

0 \| Yes \| 15-19+ \| 1232 \| 6691

1 \| Yes \| 15-19+ \| 935 \| 6653

2 \| Yes \| 15-19+ \| 1120 \| 9340

3 \| Yes \| 15-19+ \| 932 \| 6128

4 \| Yes \| 15-19+ \| 1281 \| 11506

5 \| Yes \| 15-19+ \| 968 \| 7107

6 \| Yes \| 15-19+ \| 1073 \| 8319

7 \| Yes \| 15-19+ \| 1006 \| 7035

8 \| Yes \| 15-19+ \| 1072 \| 6552

9 \| Yes \| 15-19+ \| 1123 \| 5669

\[Expert@vsx-lvn-pub2:2\]# vsenv 1

Context is set to Virtual Device vsx-lvn-pub2\_fw-lvn-snx (ID 1).

\[Expert@vsx-lvn-pub2:1\]# fw ctl multik stat

ID \| Active \| CPU \| Connections \| Peak

\-\-\--------------------------------------------

0 \| Yes \| 10-14+ \| 391 \| 115231

1 \| Yes \| 10-14+ \| 183 \| 76175

2 \| Yes \| 10-14+ \| 312 \| 116117

3 \| Yes \| 10-14+ \| 860 \| 114412

4 \| Yes \| 10-14+ \| 445 \| 90342

\[Expert@vsx-lvn-pub2:1\]# vsenv 3

Context is set to Virtual Device vsx-lvn-pub2\_vlan802 (ID 3).

\[Expert@vsx-lvn-pub2:3\]# fw ctl multik stat

fw: CoreXL is disabled

\[Expert@vsx-lvn-pub2:3\]# vsenv 0

Context is set to Virtual Device vsx-lvn-pub2 (ID 0).

\[Expert@vsx-lvn-pub2:0\]# fw ctl multik stat

fw: CoreXL is disabled

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37108?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Muazzam\_Saeed](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/8755)

Participant

‎2018-10-1908:51 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7824)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37100/highlight/true#M7824)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7824/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37100)

I am on R77.30 (going to R80.10 soon). I thought the problem is fixed on R80.10 but seems like you are having the same issue that I see on R77.30. I am not sure if we can ever get the same performance on VSX, compared with regular gateways. You need to fine tune your VSX environment to improve the performance.

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37100?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Bart\_Leysen](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/19742)

Contributor

‎2018-10-1908:57 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7825)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37101/highlight/true#M7825)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7825/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37101)

[In response to Muazzam\_Saeed](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37100/highlight/true#M7824)

I'll guess so, but even a policy push will make the cluster unstable or at least that VS.

Pushing policy will make the VS unresponsive for a couple of minutes.

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37101?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Muazzam\_Saeed](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/8755)

Participant

‎2018-10-2311:02 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7850)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37126/highlight/true#M7850)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7850/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37126)

[In response to Bart\_Leysen](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37101/highlight/true#M7825)

Just want to share my experience. We have three 4-node VSX clusters, all the hardware is 23800. One cluster was upgraded to R80.10 (from R77.30) couple of months ago, and one a few days ago.

The only issue I have is that the performance is not the same as the normal (non-VSX) gateway. Also I wish there is no downtime on changing CoreXL value.

Other than that we have no other issues, it is stable and reliable. No issues ever noticed on pushing the policy.

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37126?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Kaspars\_Zibarts](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456)

MVP Gold CHKP

‎2018-10-2311:10 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7851)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37127/highlight/true#M7851)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7851/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37127)

[In response to Muazzam\_Saeed](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37126/highlight/true#M7850)

If you upgrade to R80.20 then there will be no downtime in changing cores.

As for performance, you can tweak it to be fairly close now with 64 bit kernel on VS but of course it will never be as fast as non-vsx.

[1\\
\\
\\
Kudo](https://community.checkpoint.com/t5/kudos/messagepage/board-id/general-topics/message-id/7851/tab/all-users "Click here to see who gave kudos to this post.")

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37127?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Jerry\_Lee](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/7392)

Participant

‎2018-10-1909:26 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7826)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37102/highlight/true#M7826)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7826/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37102)

What do the interfaces look like - are you clocking up RX or TX errors?

watch netstat -ni

& ethtool for the i-faces - look at queueing

Also dig into  and look at the input queue config:

sk61143

you may need to increase it (from old memory here) as it feeds all the VSs

Good luck,

Jerry Lee

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37102?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Kaspars\_Zibarts](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456)

MVP Gold CHKP

‎2018-10-2112:29 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7835)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37111/highlight/true#M7835)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7835/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37111)

Normally I would enable MQ on busy 10Gbps interface as single core cannot cope with that much traffic.

We tried to enable it on 4x1Gbps bond but for some reason it didn't work that well. Bond kept losing members and was going up and down as a result every minute so we rolled it back. Didn't have time to investigate it any further I'm afraid but I believe there was something wrong in our config. Too many things "to do" at the moment.

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37111?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Timothy\_Hall](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/597)

MVP Gold

‎2018-10-2106:39 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7836)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37112/highlight/true#M7836)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7836/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37112)

[In response to Kaspars\_Zibarts](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37111/highlight/true#M7835)

The strange situation you encountered with Multi-Queue is why I am generally not a fan of turning on features that aren't enabled by default, unless you know for sure that you need them.  The KISS principle is your friend...  🙂

--

Second Edition of my "Max Power" Firewall Book

Now Available at [http://www.maxpowerfirewalls.com](http://www.maxpowerfirewalls.com/)

New Book: "Max Power 2026" Coming Soon

Check Point Firewall Performance Optimization

[2\\
\\
\\
Kudos](https://community.checkpoint.com/t5/kudos/messagepage/board-id/general-topics/message-id/7836/tab/all-users "Click here to see who gave kudos to this post.")

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37112?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Jerry\_Lee](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/7392)

Participant

‎2018-10-2111:00 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7837)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37113/highlight/true#M7837)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7837/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37113)

[In response to Timothy\_Hall](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37112/highlight/true#M7836)

We worked with o-tac and a diamond engineer to tshoot and tweak this issue.

.

All traffic inbound was being affected to all of the VSs on rhe 21400 4 node cluster.

Jerry

Get Outlook for Android<https://aka.ms/ghei36>

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37113?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Kris\_Pellens](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/21740)

Collaborator

‎2018-10-2201:43 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7838)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37114/highlight/true#M7838)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7838/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37114)

Hello Bart,

We've a similar set up as yours; but we're using the 23800 appliances. We've ditched R80.10 and replaced it with R80.20. Have you considered to upgrade to R80.20, because between the lines you can read that the performance on R80.10 could be better. From the R80.20 release notes:

1. Significant boost to Virtual Systems performance, utilizing up to 32 CoreXL FW instances for each Virtual System.
2. Dynamic Dispatcher - Packets are processed by different FW worker (FWK) instances based on the current instance load.
3. Changes in the number of FW worker instances (FWK) in a VSLS setup do not require downtime.
4. SecureXL Penalty Box supports the contexts of each Virtual System, see sk74520.

Has the user experience been improved after you made the proposed changes?

Many thanks.

Regards,

Kris

[1\\
\\
\\
Kudo](https://community.checkpoint.com/t5/kudos/messagepage/board-id/general-topics/message-id/7838/tab/all-users "Click here to see who gave kudos to this post.")

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37114?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Kaspars\_Zibarts](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456)

MVP Gold CHKP

‎2018-10-2202:51 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7839)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37115/highlight/true#M7839)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7839/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37115)

[In response to Kris\_Pellens](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37114/highlight/true#M7838)

Actually 64bit mode is available already in R80.10

**VSX Enhancements:**

- 64-bit support for VSX Gateways, increasing concurrent connections capacity.
- Content Awareness for VSX Gateways.

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37115?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Bart\_Leysen](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/19742)

Contributor

‎2018-10-2202:56 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7840)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37116/highlight/true#M7840)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7840/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37116)

We do see improvement after setting the CPU affinity right, i mean i definitely now see that all CPU's are used.

i also enabled multiqueing on my busiest interfaces and also here i see an improvement.

But still it's not what it should be, especially if we push a policy all connections are just dropped for 10 minutes. This is not good. we don't see this any other VSX cluster we have.

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37116?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Kaspars\_Zibarts](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456)

MVP Gold CHKP

‎2018-10-2203:02 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7841)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37117/highlight/true#M7841)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7841/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37117)

[In response to Bart\_Leysen](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37116/highlight/true#M7840)

Which CPU cores are busy when it happens? Is it VS2 ten cores or interfaces?

As suggested by Kris, switching to 64bit kernel will boost a lot of memory if it's FWK that's maxing out

check with vs\_bits -stat

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37117?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

[Bart\_Leysen](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/19742)

Contributor

‎2018-10-2203:07 AM

[Show option menu](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=7843)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37119/highlight/true#M7843)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/7843/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/37119)

[In response to Kaspars\_Zibarts](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/m-p/37117/highlight/true#M7841)

\[Expert@vsx-lvn-pub2:0\]# vs\_bits -stat

All VSs are at 32 bits

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/37119?t:ac=board-id/general-topics/thread-id/7815&t:cp=kudos/contributions/tapletcontributionspage&ticket=-O9phq59Oz3A_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

Post Reply

- «Previous
  - 1
  - [2](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091/page/2)
  - [3](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091/page/3)
- [Next»](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091/page/2)

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

| User | Count |
| --- | --- |
| <br>[israelfds95](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/93117) | 13 |
| <br>[HeikoAnkenbrand](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/21670) | 7 |
| <br>[simonemantovani](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/79070) | 5 |
| <br>[emmap](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/71054) | 3 |
| <br>[Steffen\_Appel](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/10477) | 2 |
| <br>[Kaspars\_Zibarts](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456) | 1 |
| <br>[Alex-](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/10384) | 1 |
| <br>[Danny](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/687) | 1 |
| <br>[Bob\_Zimmerman](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/27871) | 1 |
| <br>[DH](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/25118) | 1 |

[View All ≫](https://community.checkpoint.com/t5/forums/kudosleaderboardpage/board-id/general-topics/timerange/one_month/page/1/tab/authors)

Trending Discussions

[Five Habits That Improved My Check Point Deployments](https://community.checkpoint.com/t5/General-Topics/Five-Habits-That-Improved-My-Check-Point-Deployments/td-p/279760)

[Automatically Renew VPN Certificates](https://community.checkpoint.com/t5/General-Topics/Automatically-Renew-VPN-Certificates/td-p/279072)

[Snapshot and /boot disk space full](https://community.checkpoint.com/t5/General-Topics/Snapshot-and-boot-disk-space-full/td-p/280183)

Upcoming Events

Sort by:

- [All](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091#)
- [Virtual](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091#)
- [In-Person](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091#)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Tue 28 Jul 2026 @ 11:00 AM (EDT)

[Under the Hood - Check Point and Illumio – Modern Network Defense Against AI-Based Threats](https://community.checkpoint.com/t5/CheckMates-Events/Under-the-Hood-Check-Point-and-Illumio-Modern-Network-Defense/ev-p/279701)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 12:00 PM (SGT)

[The AI Security Report 2026: A Turning Point for Enterprise Defense - SGT](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280019)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 02:00 PM (IDT)

[The AI Security Report 2026: A Turning Point for Enterprise Defense - AMER](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280021)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 03:00 PM (CEST)

[The AI Security Report 2026: A Turning Point for Enterprise Defense EMEA](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280020)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 11:00 AM (EDT)

[TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370)

Thu 30 Jul 2026 @ 11:30 AM (CDT)

[CheckMates Live DFW: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/CheckMates-Live-DFW-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279920)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Tue 28 Jul 2026 @ 11:00 AM (EDT)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 12:00 PM (SGT)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 02:00 PM (IDT)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 03:00 PM (CEST)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 11:00 AM (EDT)

[TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Thu 30 Jul 2026 @ 10:00 AM (PDT)

[AI Security Masters E12: READY OR NOT: Securing the AI Enterprise 4/5 - AI Gateway](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Masters-E12-READY-OR-NOT-Securing-the-AI-Enterprise/ev-p/277411)

[In-Person](https://community.checkpoint.com/labels/In-Person)

Tue 11 Aug 2026 @ 11:30 AM (EDT)

[New York City: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/New-York-City-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279476)

[In-Person](https://community.checkpoint.com/labels/In-Person)

Thu 13 Aug 2026 @ 11:30 AM (EDT)

[Waltham, MA: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/Waltham-MA-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279475)

[In-Person](https://community.checkpoint.com/labels/In-Person)

Thu 20 Aug 2026 @ 08:30 AM (COT)

[Medellin: Workspace Evolution: Hybrid Mesh Management - Visibilidad, Automatización e IA](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Evolution-Hybrid-Mesh-Management-Visibilidad/ev-p/280003)

[In-Person](https://community.checkpoint.com/labels/In-Person)

Thu 20 Aug 2026 @ 06:00 PM (COT)

[Medellin: Workspace Intelligence: IA Generativa en Acción para Equipos de Seguridad](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Intelligence-IA-Generativa-en-Acci%C3%B3n-para/ev-p/280004)

[In-Person](https://community.checkpoint.com/labels/In-Person)

Thu 27 Aug 2026 @ 09:00 AM (CEST)

[Check Point Hands-On SASE and Cloud Workshop - Zurich](https://community.checkpoint.com/t5/CheckMates-Events/Check-Point-Hands-On-SASE-and-Cloud-Workshop-Zurich/ev-p/279914)

[In-Person](https://community.checkpoint.com/labels/In-Person)

Wed 21 Oct 2026 @ 09:00 AM (BST)

[AI Security Workshop - Glasgow](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Workshop-Glasgow/ev-p/278505)

[CheckMates Events](https://community.checkpoint.com/t5/CheckMates-Events/eb-p/events)

[Top](https://community.checkpoint.com/t5/General-Topics/Bad-Performance/td-p/37091)

About CheckMates

- [Getting Started & FAQ](https://community.checkpoint.com/t5/help/faqpage)
- [Community Guidelines](https://community.checkpoint.com/t5/user/TermsOfServicePage)

Learn Check Point

- [Check Point for Beginners](https://community.checkpoint.com/t5/Check-Point-for-Beginners-2-0/bg-p/check-point-for-beginners-2-0)
- [Check Point Trivia](https://community.checkpoint.com/t5/Check-Point-Trivia/bg-p/trivia)
- [CheckFlix Videos](https://community.checkpoint.com/t5/CheckFlix/ct-p/checkflix)

Advanced Learning

- [Check Point Security Masters](https://community.checkpoint.com/t5/Check-Point-Security-Masters/gp-p/ccsm)
- [Tip of the Week](https://community.checkpoint.com/t5/SecureKnowledge-Tip-of-the-Week/bg-p/secureknowledge)
- [TechTalks](https://community.checkpoint.com/t5/TechTalks/ct-p/techtalks%20role=)
- [Training and Certification](https://community.checkpoint.com/t5/Training-and-Certification/bd-p/training-and-certification)

Resources

- [CheckMates Toolbox](https://community.checkpoint.com/t5/CheckMates-Toolbox/ct-p/CheckMatesToolbox)
- [Developers (Code Hub)](https://community.checkpoint.com/t5/Developers-API-CLI/bd-p/codehub)
- [Product Announcements](https://community.checkpoint.com/t5/Product-Announcements/bg-p/products-blog)
- [Upcoming Events](https://community.checkpoint.com/t5/Upcoming-Events/bg-p/checkmates-live)

Non-English Discussions

- [Español](https://community.checkpoint.com/t5/Espa%C3%B1ol/bd-p/spanish)
- [French](https://community.checkpoint.com/t5/Fran%C3%A7ais/bd-p/francais)
- [Japanese](https://community.checkpoint.com/t5/Japanese-%E6%97%A5%E6%9C%AC%E8%AA%9E/bd-p/Japanese)
- [Português](https://community.checkpoint.com/t5/Portugu%C3%AAs/bd-p/portuguese)
- [Russian](https://community.checkpoint.com/t5/Russian/bd-p/russian)
- [Chinese](https://community.checkpoint.com/t5/Chinese/bd-p/taiwan)

YOU DESERVE THE BEST SECURITY

We’re Social. Follow Us [CheckMates on LinkedIn](http://linkedin.com/company/cpcheckmates)  [Check Point on YouTube](https://www.youtube.com/user/CPGlobal) [CheckMates on Facebook](https://www.facebook.com/cpcheckmates/) [CheckMates on Instagram](https://www.instagram.com/cpcheckmates/)

©1994-2026 Check Point Software Technologies Ltd. All rights reserved. [Copyright](https://www.checkpoint.com/copyright/) [Privacy Policy](https://www.checkpoint.com/privacy/) [About Us](https://www.checkpoint.com/about-us/) [UserCenter](https://usercenter.checkpoint.com/)

Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.

Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
