This article provides information about monitoring L7 advanced services.
When multiple L7 services are enabled or if the amount of traffic being inspected by the L7 services is high.
Services which uses content licenses like IDP, SKY ATP take large amount of memory usages, SRX reallocates system's available memory to these services, in rare instance that traffic is impacted.
The below commands will output the memory usage by L7 advanced services.
user@host> request pfe execute command "show arena" target fwdd | match data
user@host> request pfe execute command "show services mum" target fwdd | match "Operational zone"
> These commands will help you assess the memory allocation and utilization status in real-time.
> When monitoring memory usage, you can check the "Operational zone" in the output of the show services mum command. The operational zones are defined as follows:
For example, in the retrieved context, the Orange zone limit is 31,892,670 bytes. When the SRX device operates in the Orange zone, some security features might not work as expected, and traffic may start to drop.