DescriptionCheck Point firewalls have a memory segment dedicated to the kernel. If the kernel memory is nearing its limit, an alert will be issued.
Remediation StepsDetermine why the firewall kernel memory is high and resolve the issue.
How does this work?indeni uses the built-in Check Point "fw ctl pstat" command to retreive the usage of the kernel memory.
Why is this important?If the firewall kernel memory becomes fully utilized, performance may be impacted and traffic may be dropped. It is critical to monitor the kernel memory's usage and handle the issue prior to full utilization.
Without Indeni how would you find this?An administrator could login and manually run the command.
View Source Code