> Source: [sk138932](https://support.checkpoint.com/results/sk/sk138932)

# sk138932 - High CPU load seen every 30 minutes on VSX

| Property | Value |
|----------|-------|
| Solution ID | sk138932 |
| Date Created | 2018-10-25 |
| Last Modified | 2018-11-04 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * A high CPU load is seen every 30 minutes on VSX.
* RAD log (*rad.elg* ) shows the following:  
  \[rad\]@vsxseso2-ext\[\] Warning:cp_timed_blocker_handler: A handler \[0xf7e70a30\] blocked for 26 seconds.  
  \[rad\]@vsxseso2-ext\[\] Warning:cp_timed_blocker_handler: Handler info: Library \[/opt/CPsuite-R80/fw1/lib/librad.so\], Function offset \[0x66a30\].  
  \[rad\]@vsxseso2-ext\[\] Warning:cp_timed_blocker_handler: Handler info: Nearest symbol name \[_ZN10CRadFwConn18static_handle_dataEP7_FwConnPvj\], offset \[0x66a30\].
* Even though Anti-Bot, Anti-Virus, Application Control, and URL filtering blades are disabled in this environment, RAD still runs on VS0.

## Cause

On VSX, RAD will always run on VS0. This is done to serve other VS's regardless of which blades are enabled in the environment.

There are two database update processes done by RAD: one that runs every half an hour and the other that runs every two hours.

Both are quite heavy and may consume high CPU during this update process.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content