Description

This article provides information about monitoring L7 advanced services.

Symptoms

When multiple L7 services are enabled or if the amount of traffic being inspected by the L7 services is high.

Services which uses content licenses like IDP, SKY ATP take large amount of memory usages, SRX reallocates system's available memory to these services, in rare instance that traffic is impacted.

Solution

The below commands will output the memory usage by L7 advanced services.

 

user@host> request pfe execute command "show arena" target fwdd | match data 

user@host> request pfe execute command "show services mum" target fwdd | match "Operational zone" 

 

> These commands will help you assess the memory allocation and utilization status in real-time.

> When monitoring memory usage, you can check the "Operational zone" in the output of the show services mum command. The operational zones are defined as follows:

  • Green Zone: Memory usage is within safe limits.
  • Yellow Zone: Memory usage is approaching critical levels.
  • Orange Zone: Memory usage is critical, and some security features might not work as expected.
  • Red Zone: Memory usage is at maximum capacity, and traffic may start to drop.

For example, in the retrieved context, the Orange zone limit is 31,892,670 bytes. When the SRX device operates in the Orange zone, some security features might not work as expected, and traffic may start to drop.

Modification History

2024-09-28 : Article Created

2024-09-28 : Initial Release