> Source: [sk111155](https://support.checkpoint.com/results/sk/sk111155)

# sk111155 - FWM process consumes CPU at high level

| Property | Value |
|----------|-------|
| Solution ID | sk111155 |
| Date Created | 2016-04-24 |
| Last Modified | 2020-04-22 |
| Technical Level | Advanced |
| Products | Security Management Server, Multi-Domain Security Management Server |
| Versions | R82.10, R82, R81.20, R82.10, R82.20, R81.20, R82, R82.20 |

## Symptoms

- * FWM process consumes high CPU
* Output of "pstack" script shows the following stack:  
  (refer to [sk98348 - Best Practices - Security Gateway Performance](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98348), section (5-1) - Advanced diagnostics - CPU - command 4. sh pstack_sym.sh)

  ```
  
  0xf4e9997a: XML_GetFeatureList + c7a (libcpexpat.so) (d456fce8, 0, f4eb22c0, ca4e07dd, caa35e3a, d456fd00) + 10
  0xf4e98e4e: XML_GetFeatureList + 14e (libcpexpat.so) (d456fce8, ca2a6008, caa35e3a, d456fd00, f4eb22c0, e7a00040) + 40
  0xf4e9bd7f: XML_GetFeatureList + 307f (libcpexpat.so) (d456fce8, f4eb22c0, ca2a6008, caa35e3a, 1d, ca2a6008) + 20
  0xf4e9bb71: XML_GetFeatureList + 2e71 (libcpexpat.so) (d456fce8, ca2a6008, caa35e3a, d456fd00, ca2a6008, 0) + 10
  0xf4e98613: XML_ParseBuffer + 83 (libcpexpat.so) (d456fce8, 78fe32, 0, f7ecfec8, f7ecfec8, fff3c5d0) + 10
  0xf4e98565: XML_Parse + 165 (libcpexpat.so) (d456fce8, cb5e0008, 78fe32, 0, fff3c5d0, e6aaa1e0) + 10
  ```

* Increasing the CPMI buffers per [sk109236](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk109236) did not solve the issue

## Cause

***contract_stat*** binary runs every 6 hours and sends requests to fwm process , which causes fwm to consume high CPU and become unresponsive while it is processing the cp.contract file .

The load will be heavier on Security Management Server which manage large number of Security Gateways, and on Multi Domain Servers that have a large number of Domain Management Servers.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content
