156-215.80 · Question #369
You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you…
The correct answer is C. fw ctl multik set_mode 9. To enable both Priority Queues and fully activate Dynamic Dispatcher on a Check Point Security Gateway, CoreXL must be set to mode 9 using the correct fw ctl multik command.
Question
You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?
Options
- Afw ctl multik dynamic_dispatching on
- Bfw ctl multik dynamic_dispatching set_mode 9
- Cfw ctl multik set_mode 9
- Dfw ctl miltik pq enable
How the community answered
(31 responses)- A6% (2)
- B3% (1)
- C81% (25)
- D10% (3)
Why each option
To enable both Priority Queues and fully activate Dynamic Dispatcher on a Check Point Security Gateway, CoreXL must be set to mode 9 using the correct fw ctl multik command.
'fw ctl multik dynamic_dispatching on' only toggles Dynamic Dispatcher on but does not activate Priority Queues, so it does not fully optimize packet handling the way mode 9 does.
'fw ctl multik dynamic_dispatching set_mode 9' is not valid Check Point CLI syntax - 'dynamic_dispatching' is not a subcommand that precedes 'set_mode' in this utility.
The command 'fw ctl multik set_mode 9' sets CoreXL to mode 9, which is the only mode that simultaneously enables Priority Queues and fully activates Dynamic Dispatcher, allowing the gateway to better prioritize and distribute packets across CPU cores to reduce drops under high CPU load.
'fw ctl miltik pq enable' contains a typo ('miltik' instead of 'multik') and Priority Queues are not enabled via a separate 'pq enable' subcommand but through setting mode 9.
Concept tested: CoreXL mode 9 Priority Queues and Dynamic Dispatcher
Source: https://support.checkpoint.com/results/sk/sk98348
Topics
Community Discussion
No community discussion yet for this question.