> Source: [sk176908](https://support.checkpoint.com/results/sk/sk176908)

# sk176908 - fwk0_dev_0 consumes high CPU

| Property | Value |
|----------|-------|
| Solution ID | sk176908 |
| Date Created | 2021-12-14 |
| Last Modified | 2022-12-20 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R81.20, R81.10 (EOS), R81 (EOS) |

## Symptoms

- After users run the `#top`, the *fwkX_dev_0* process consumes high CPU. Example output:

```
 PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
19437 admin      0 -20 18.402g 0.015t 538544 S 309.9  1.0   8626:21 fwk0_dev_0
```

## Cause

By design, in User Space firewall, there is not a separate process for each *fw_worker.* Instead, there is a multi-threaded process: *fwk\[X\]_dev_0* . \[X\] represents the number of the firewall instance. Examples: *fwk0_dev_0* , *fwk_1_dev_0*   

The *fwk\[X\]_dev_0* process shows all *fwk_workers* below each instance.  

In user space firewall instances (non-VSX) there is one *fwk0_dev_0* process.  

In a VSX environment, each Virtual System has its own *fwk\[X\]_dev_0* process. For example, in a VSX environment *fwk0_dev_0* belongs to VS0 and*fwk1_dev_0* belongs to VS1*.*   

The CPU usage value for a fwk\[X\]_dev_0 process can be much higher than 100% CPU usage. This is because fwk\[X\]_dev_0 shows the combined CPU usage for all of the *fwk_workers* processes for a given firewall instance.  

<br />

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content