Check Point Alert of the Week: High firewall kernel memory usage has been measured

This is a real life sample alert from indeni.

Description:

The firewall kernel memory usage has crossed the high threshold. It is now at 80.0%.

Manual Remediation Steps:

On open servers, you can install more memory. However, the maximum amount of memory that can be used by the kernel is 2 GB.
You can decrease the TCP end timeout.
You can decrease the number of concurrent connections to reduce memory consumption.
We also suggest reading SK33781.

How does this alert work?

indeni analyzes the output from “fw ctl pstat” on a regular basis.

Interested in learning more? Download for free the official indeni guide to Preemptive Maintenance of Check Point Firewalls.

Leave a Reply