Concurrent connection limit nearing for Check Point


Check Point


Indeni will alert the number of connections for a device is too high.

Remediation Steps

Review why this may be happening and consider upgrading the device or redirecting traffic.
Consider enabling aggressive aging if it is not yet enabled: Aggressive Aging Configurations

How does this work?

indeni uses the built-in Check Point "fw ctl pstat" command to retreive the current usage an limit.

Why is this important?

It is possible to set a limit on how many connections a device can support. If the limit is reached, no new connections are allowed and this usually results in traffic loss.

Without Indeni how would you find this?

An administrator could login and manually run the command.

View Source Code