VSX CPU usages show "0" for a Checkpoint Appliance 13500

Document ID : KB000009056
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

After discovered a Checkpoint Appliance 13500 device on OneClick, go to "Information" tab of each VSX, you might find VSX CPU usages are all "0" under CheckPoint Firewall.

capture1.PNG

Environment:
Spectrum 10.x
Cause:

Spectrum polls vsxStatusCpuUsageTable (1.3.6.1.4.1.2620.1.16.22.2) in the device MIB to popular VSX CPU usage table. This is to show usage for all the Virtual systems of a CheckPoint device.

VSX CPU usage.png

Resolution:

Please collect the device SNMP walk file to check the value of vsxStatusCpuUsageTable (1.3.6.1.4.1.2620.1.16.22.2). If the device SNMP walk file doesn't have any entries for this OID or the value returns 0, this means the device is not sending any data or sending incorrect data for the VSX CPU usage. 

There is a known issue for Checkpoint that SNMP query for CPU usage by each Virtual System (OID 1.3.6.1.4.1.2620.1.16.22.2) returns 0 (zero) values. Please provide this CheckPoint link to the customer in order to contact the hardware vendor to get the fix for this problem.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102434

Alternatively, there is a workaround for this in Spectrum. We can use Performance tab of each virtual system, which reads VSX CPU usage for all the CPU instances from HOST-RESOURCE-MIB [hrProcessorLoad 1.3.6.1.2.1.25.3.3.1.2] and populate to the graph.