Check Point - Basic Troubleshooting Command Reference

List of basic Check Point troubleshooting commands.

Command
Description
cpview
View OS and software blade statistics.
cpinfo
Collect diagnostic data for CP support cases.
sar
System monitoring tool (GAiA) generating monitoring data every 10 minutes, keeping the data for 7 days.
E.g.: sar -n EDEV - Interface errors from today
sar -u -f /var/log/sa/sa04 - CPU stats from the 4th.
cpsizeme
For 24h, monitor gw resource utilization every minute and generate a CSV report to use for sizing considerations or troubleshooting. See sk88160 for additional information.
ethtool -S
View interface statistics and counters.
emergendisk
Create a bootable system on a USB device for system or password recovery and secure HDD wiping.
cpinfo -z -o <file>
Create a compressed cpinfo file to open with the InfoView utility or to send to Check Point support.
cst
ecst
Configuration Summary Tool and its enhanced version. Packs IPSO config, logs, core dumps etc. into a single file.
fw ctl zdebug drop
Real time listing of dropped packets.
cpwd_admin list
Display PID, status and starting time of CP WatchDog monitored processes.
cpca_client lscert
Display all ICA certificates.
fw tab –t <tbl> [–s]
View kernel table contents. Make output short with -s switch. List all available tables with fw tab -s.
Example: fw tab -t connections -s – View connection table.
fw ctl multik stat
Show connection statistics for each kernel instance.
fw ctl pstat
Display internal statistics including information about memory, inspect, connections, synchronization and NAT.
fw ctl chain
Displays in and out chain of CP modules. Useful for placing fw monitor into the chain with the -p option.
cp_conf sic state
cp_conf sic init <key>
Display SIC trust status or (re)initialize SIC.
fwm sic_reset
Reset Internal Certificate Authority (ICA) and delete certs. Reinitialize ICA with cpconfig or cp_conf ca init.
cpca_client
Manage parts of the ICA. View, create and revoke certificates, start and stop the ICA Web Tool.
Examples: cpca_client lscert -stat Valid
cpca_client search <searchstring>
fwaccel <off|on>
Disable/enable SecureXL.
cpmonitor
Statistics and analysis of snoop/tcpdump/fw monitor traffic capture files.


Comments

Popular posts from this blog

Download IOS Image for Router

tcpdumps in Checkpoint Firewall