vsx

Description

  • Shows and configures Memory Resource Control.

Syntax

vsx

      fetch <options>

      fetch_all_cluster_policies

      fetchvs <options>

      get

      mstat <options>

      resctrl

      showncs <options>

      sicreset

      stat <options>

      unloadall

      vspurge

Important - On Scalable Platforms (Maestro and Chassis), you must run the applicable commands in the Expert mode on the applicable Security Group.

Note - The fw6 vsx commands are not supported.

Parameters

Parameter

Description

fetch <options>

Fetches configuration for VSX GatewayClosed Physical server that hosts VSX virtual networks, including all Virtual Devices that provide the functionality of physical network devices. It holds at least one Virtual System, which is called VS0..

See vsx fetch.

fetch_all_cluster_policies

Fetches security policyClosed Collection of rules that control network traffic and enforce organization guidelines for data protection and access to resources with packet inspection. for all Virtual Systems and Virtual Routers from clusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. peers.

See vsx fetch_all_cluster_policies.

fetchvs <options>

Fetches configuration for a Virtual SystemClosed Virtual Device on a VSX Gateway or VSX Cluster Member that implements the functionality of a Security Gateway. Acronym: VS..

See vsx fetchvs.

get

Shows the information about the current VSX context.

See vsx get.

mstat <options>

Shows and configures Memory Resource Control.

See vsx mstat.

resctrl

From R80.40, the CPU Resource Control is integrated into the CPView utility.

  1. Go to the context of Virtual System 0:

  2. Run the CPView:

    cpview

    See cpview.

  3. From the top, click:

    Advanced > VSX > VSs > Physical-Resources

    Notes:

    • This tab shows the CPU consumption by Virtual Systems and by Virtual Routers.

    • The "CPU %" column shows the percentage of CPU used by all the processes of each Virtual System.

      The column shows a percentage of a single CPU (the same behavior as in the "top" command).

      Example:

      • There are 4 CPU cores on the VSX Gateway.

      • The processes of the Virtual System "VS1" are using:

        • 30% of CPU 0

        • 40% of CPU 1

        • 50% of CPU 2

        • 10% of CPU 3

        In such case, the "CPU %" column shows 130% for VS1.

    • To get the CPU usage for the VSX Gateway / VSX Cluster MemberClosed Security Gateway that is part of a cluster., divide the "CPU %" value in the Total Resource Consumption section by the number of the CPU cores.

showncs <options>

Shows Check Point Network Configuration Script (NCS) for Virtual DeviceClosed Logical object that emulates the functionality of a type of physical network object. Virtual Device can be on of these: Virtual Router, Virtual System, or Virtual Switch..

See vsx showncs.

sicreset

Resets SICClosed Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server. for Virtual System or Virtual RouterClosed Virtual Device on a VSX Gateway or VSX Cluster Member that functions as a physical router. Acronym: VR. in the current VSX context.

See vsx sicreset.

stat <options>

Shows status information for VSX Gateway.

See vsx stat.

unloadall

Unloads security policy for all Virtual Systems and Virtual Routers.

See vsx unloadall.

vspurge

Cleans unused entries for Virtual Devices.

Fetches configuration file for Virtual Devices.

See vsx vspurge.