> Source: [sk173709](https://support.checkpoint.com/results/sk/sk173709)

# sk173709 - High CPU utilization on PDP Gateway which sends updates to multiple PEP Gateways

| Property | Value |
|----------|-------|
| Solution ID | sk173709 |
| Date Created | 2021-05-25 |
| Last Modified | 2021-12-12 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81 (EOS) |
| OS | Gaia |

## Symptoms

- High CPU utilization on PDP Gateway which sends updates to multiple PEP Gateways

## Solution

This problem was fixed. The fix is included starting from:

* [Check Point R81.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170416)
* [Jumbo Hotfix Accumulator for R81](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170114) starting from Take 42
* [Jumbo Hotfix Accumulator for R80.40](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165456) starting from Take 126
* [Jumbo Hotfix Accumulator for R80.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152) starting from Take 237
* [Jumbo Hotfix Accumulator for R80.20](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137592) starting from Take 203

Check Point recommends to always upgrade to the most recent version ([Security Gateway](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=435) / [VSX](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=359) / [Security Management Server](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=184) / [Multi-Domain Security Management Server](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=166) / [SmartConsole](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=191)).

For **other [supported](http://www.checkpoint.com/support-services/support-life-cycle-policy/index.html) versions** , [Check Point Support](http://www.checkpoint.com/support-services/contact-support/index.html) can supply a **Hotfix** .  
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.  
For faster resolution and verification, please collect [CPInfo files](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739) from the Security Management Server and Security Gateways involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168597).

<br />

**Notes:**

* Install this hotfix on PDP Gateways that serve PEP Gateways.

* The fix handles the dispatching of identities from PDP to PEP by caching a version of the serialized identity in the PDP to be shared across PEP Gateways.

* The fix adds a new dedicated debug flag "**UPDATE_INFO**" that shows when an update does not have a cached version.

  To set the new debug flag:
  1. Examine the current debug settings:  
     `pdp debug stat`

  2. Enable the debug flag:  
     `pdp debug set UPDATE_INFO all`

  3. Make sure the debug flag is enabled:  
     `pdp debug stat`

     Example output:

     ```
     Current debug status is ON
     These topics are currently set:
     topic severity
     ============
     +TRACKER      all
     +UPDATE_INFO  all
     ```

     This log line now appears in the debug output:  
     `cached fwset version is empty, calling serialize`  
     This is an update, for which there was no cached version to use.
  4. Disable the debug flag:  
     `pdp debug unset UPDATE_INFO all`

  5. Make sure the debug flag is disabled:  
     `pdp debug stat`

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content