High Memory Usage: FWM Process – Check Point Firewall Alerts

This is a real life sample alert from the indeni Check Point Firewall guide to alerts.

Alert Description:

The memory usage in the operating system is higher than the high threshold. It is now at 92.0%. Review the list of processes below. If possible disable device functions which are not required.
fwm (SmartCenter and Management-related Functionality) with 6.7 percent memory usage.
fwm (SmartCenter and Management-related Functionality) with 5.5 percent memory usage.
fwm (SmartCenter and Management-related Functionality) with 9.9 percent memory usage.
fwm (SmartCenter and Management-related Functionality) with 5.6 percent memory usage.
fwm (SmartCenter and Management-related Functionality) with 5.7 percent memory usage.
fwm (SmartCenter and Management-related Functionality) with 15.6 percent memory usage.
fwm (SmartCenter and Management-related Functionality) with 6.1 percent memory usage.
fwm (SmartCenter and Management-related Functionality) with 9.3 percent memory usage.

Manual Remediation Steps:

It appears there are many “fwm” processes in the list above. Each “fwm” process represents a CMA or domain. Consider upgrading to a device with more RAM.

How does this alert work?

indeni tracks the CPU and memory usage of each process. When there are known patterns, such as multiple fwm processes, the correct manual remediation steps are presented.