Check Point performance monitoring

Monitoring and operational reference for Check Point performance monitoring.

Reference

You can also set to send automatic alerts/emails from SmartView Monitor clicking on Tools - Start System Alert Daemon, and then configure/enable the thresholds on menu Gateway - Threshold Settings - Edit Global Settings.

Check firewall version and hotfixes status:

fw ver -k

Check cluster and virtual system status:

fw vsx stat -l
cphaprob state
cphaprob -a if
cphaprob -l list
iclid
>show cluster state

Check SecureXL and CoreXL:

fwaccel stat
fwaccel stat -s
fw ctl multik stat
fw ctl affinity -l -r
fw ctl affinity -l
sim affinity  -l

Check network errors:

ifconfig -a
netstat -I

Check CPU, Memory and Disk health:

cpstat -f cpu os
cpstat -f multi_cpu os
cpstat -f memory os
df -h
cpview -t

Check kernel's capacity:

fw ctl pstat  (Connections table)
fw tab -t connections | grep limit
fw tab -t connections -s
fw tab -t fwx_cache -s
fw ctl pstat | grep Aggressive
fw ctl get int fwx_max_conns

Checking the reason for drop

 fw ctl zdebug + drop | grep 'x.x.x.x\|y.y.y.y'

Also check the top talkers page.

See also

• Check Point