Полезные команды для Check Point

sysadmin

Участник
Предлагаю собрать перечень команд на каждый день по Gaia OS. Постим только то что реально нужно каждый день в целях траблшутинга и мониторинга NGFW и прочих check point железок
 

NanoSuit

Участник
Справочник команд checkpoint на каждый день
cpconfigchange SIC, licenses and more
cpview -tshow top style performance counters
cphaprob statlist the state of the high availability cluster members. Should show active and standby devices.
cphaprob -a ifdisplay status of monitored interfaces in a cluster
cphaprob -l listdisplay registered cluster devices and status
cphaprob syncstatdisplay sync transport layer statistics
cphaprob ldstatdisplay sync serialization statistics
cphastopstop a cluster member from passing traffic. Stops synchronization. (emergency only)
clusterXL_admin down –pdisable this node from cluster membership
cphaconf cluster_id getget cluster Global ID membership
cplic printlicense information
cpstartstart all checkpoint services
cpstat fwshow policy name, policy install time and interface table
cpstat hahigh availability state
cpstat bladestop rule hits and amount of connections
cpstat os -f allcheckpoint interface table, routing table, version, memory status, cpu load, disk space
cpstat os -f cpucheckpoint cpu status
cpstat os -f multi_cpucheckpoint cpu load distribution
cpstat os -f sensorshardware environment (temperature/fan/voltage)
cpstat os -f routingcheckpoint routing table
cpstopstop all checkpoint services
cpwd_admin monitor_listlist processes actively monitored. Firewall should contain cpd and vpnd.
show sysenv allshow hardware sensors (fans,power supply,temp,volt)
show asset allshow serial numbers and hardware info
show route destination xx.xx.xx.xxshow routing for specific host
ip route get xx.xx.xx.xxshow routing for specific host
iclid / show cluster stateshow cluster fail over history
promote_utilpromote the Secondary Management server to become the Primary server
cp_conf sic init key123 norestartreset SIC without restarting the firewall process
Command Description




Useful FW Commands
fw verfirewall version
fw ctl iflistshow interface names
fw ctl pstatshow control kernel memory and connections
fwaccel statshow SecureXL status
fw fetch <manager IP>get the policy from the firewall manager
fwm load <policy name> <gateway name>compile and install a policy on the target's gateways.
fw getifslist interfaces and IP addresses
fw logshow the content of the connections log
fw log -b "MMM DD, YYYY HH:MM:SS" "MMM DD, YYYY HH:MM:SS"search the current log for activity between specific times
fw log -c dropsearch for dropped packets in the active log; also can use accept or reject to search
fw log -ftail the current log
fwm logexport -i <log name> -o <output name> -n -pexport an old log file on the firewall manager
fw logswitchrotate logs
fw lslogslist firewall logs
fw statfirewall status, should contain the name of the policy and the relevant interfaces.
fw stat -lshow which policy is associated with which interface and package drop, accept and reject
fw tabdisplays firewall tables
fw tab -s -t connectionsnumber of connections in state table
fw tab -s -t userc_usersnumber of remote users connected (VPN)
fw tab -t xlate -xclear all translated entries
fw unloadlocalclear local firewall policy
fw monitor -e "accept host(10.1.1.10);"trace the packet flow to/from the specified host
fw ctl zdebug + drop | grep 'x.x.x.x\|y.y.y.y'Check reason of your packet being dropped
Command Description
 

Technik

Случайный прохожий
Диагностика производительности checkpoint , некоторые команды

Check Point WatchDog Daemon, который показывает все модули апплайнса, их PID, состояние и количество запусков
Код:
cpwd_admin list
Использование CPU, их количество и распределение процессорного времени в процентах
Код:
cpstat -f cpu os
Использование виртуальной RAM, сколько всего активной, свободной RAM и другое
Код:
cpstat -f memory os
Длинный список всех процессов, их ID, занимаемую виртуальную память и память в RAM, CPU
Код:
ps auxwf
Покажет самый затратный процесс
Код:
ps -aF
Распределение ядер под разные инстанции фаервола, то есть технология CoreXL
Код:
fw ctl affinity -l -a
Анализ RAM и общие показатели соединений, cookies, NAT
Код:
fw ctl pstat
Буфер RAM
Код:
free -m
 
Верх Низ