I've got about 5 UTM's around the world that have cpd process running at >95% of the CPU all the time. Monitor shows disconnected, but when I ssh or web gui to the device I can get in.

I believe all of them have original version of CP on them, Check Point VPN-1(TM) & FireWall-1(R) NGX (R62) HFA_01, Hotfix 601 - Build 048.

We'd like for them to get back to a known good state prior to attempting an upgrade to R65 HFA 25.

Any ideas on what's going on here? I've seen other posts regarding hardware incompatibility issues, but since they're UTM's I would guess (hope) that this isn't the case.

Again anyone's help is greatly appreciated.