The BEST way to tune the profile in order to lower the CPU load still maintaining security at good

level is to set the Performance Impact to Medium or lower. This will reduce the number of packets

that are inspected by the Threat Prevention blades, while still providing a high level of protection .

Setting High Confidence to Low and Low Confidence to Inactive will lower the security level, as it will

allow more traffic that may be malicious. The problem is likely with the Threat Prevention Profile, as

it can have a significant impact on the CPU utilization of the Security Gateway. Adding more memory

to the appliance will not solve the problem, as memory is not the bottleneck in this case. Setting the

Performance Impact to Very Low Confidence to Prevent will increase the CPU load, as it will inspect

more packets and block more traffic that may be false positives.

Reference: Threat Prevention Administration Guide, Check Point R81.10