In Maestro Dual Site in the VSX VSLS mode, CoreXL does not change the number of Firewall instances and SND instances during traffic load

Product: Maestro HyperScale Firewall, VSX (Traditional)

Version: R81.10 (EOS), R81.20, R82

OS: Gaia

Last Modified: 2025-11-05

Symptoms

• Although CoreXL Dynamic Balancing is enabled in the Maestro Security Group, CoreXL does not change the number of Firewall instances and SND instances during traffic load (CPview tool > CPU > Overview > Host).
• The Maestro Security Group is configured in the Traditional VSX mode in the VSLS mode.
• This is a Maestro Dual Site environment.

Cause

CoreXL Dynamic Balancing issue in the VSLS mode when the Virtual System VS0 is Active on the Active Maestro Site and the Virtual System under traffic load is Active on the Standby Maestro Site.

Solution

This problem was fixed. The fix is included in:

• Jumbo Hotfix Accumulator for R82 starting from Take 44
• Jumbo Hotfix Accumulator for R81.20 starting from Take 119

If you choose not to upgrade, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

Hotfix installation instructions:

Refer to sk168597 - How to install a Hotfix.

NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Article Properties

Access Level: General

Status: Approved by TAC

Date Created: 2025-05-21

Last Modified: 2025-11-05