We've just upgrade our Check Point systems from R55 to R65, and overall
everything went smoothly. One thing that is kind of an odd behavior,
however, is the load average on the enforcement points.
Each of our enforcement points (2 HA clusters of 2 nodes each) shows a
minimum load average of 1.00, depending on what is going on. It will
almost never go under that. On R55, this was not the typical behavior.
Looking on the system, I see a kernel thread that is appears to be in a
waiting state:
root 638 0.0 0.0 0 0 ? DW Feb16 0:00 [fw1-wt]
Our management system does not have this process running, and does not
show the constant load average.
Looking around, this is a worker thread for FW1. A message on CPUG
states that this is normal behavior (per Check Point support) [1], but
I'm concerned as to why it is perceived as normal?
It doesn't appear to be causing a performance hit that I can tell. My
concern is that something is misconfigured, and I'm not able to
determine what.
Does anyone else notice this behavior on their R65 SPLAT systems? Did
this behavior change sometime between R55 and R65?
[1] Acceptable load average on SPLAT/RHEL
<http://www.cpug.org/forums/check-point-secureplatform-splat/4578-acceptable-load-average-splat-rhel.html>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
