Difference between revisions of "Performance Monitoring"

From Tech-Wiki
Jump to: navigation, search
(Created page with "Category:Check Point '''Back to Gaia''' Check firewall version and hotfixes status: fw ver -k Check cluster and virtual system status: fw vsx stat...")
 
 
(12 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
[[Category:Check Point]]
 
[[Category:Check Point]]
 
'''[[Check Point#Gaia|Back to Gaia]]'''
 
'''[[Check Point#Gaia|Back to Gaia]]'''
 +
 +
You can also set to send automatic alerts/emails from SmartView Monitor clicking on Tools - Start System Alert Daemon, and then configure/enable the thresholds on menu Gateway - Threshold Settings - Edit Global Settings.
 +
  
 
Check firewall version and hotfixes status:
 
Check firewall version and hotfixes status:
Line 9: Line 12:
 
  cphaprob state
 
  cphaprob state
 
  cphaprob -a if
 
  cphaprob -a if
 +
cphaprob -l list
 +
iclid
 +
>show cluster state
 +
 +
Check SecureXL and CoreXL:
 
  fwaccel stat
 
  fwaccel stat
 +
fwaccel stat -s
 +
fw ctl multik stat
 +
fw ctl affinity -l -r
 +
fw ctl affinity -l
 +
sim affinity  -l
  
 
Check network errors:
 
Check network errors:
Line 20: Line 33:
 
  cpstat -f memory os
 
  cpstat -f memory os
 
  df -h
 
  df -h
 +
cpview -t
  
 
Check kernel's capacity:
 
Check kernel's capacity:
Line 28: Line 42:
 
  fw ctl pstat | grep Aggressive
 
  fw ctl pstat | grep Aggressive
 
  fw ctl get int fwx_max_conns
 
  fw ctl get int fwx_max_conns
 +
 +
Checking the reason for drop
 +
  fw ctl zdebug + drop | grep 'x.x.x.x\|y.y.y.y'
  
 
Also check the top talkers page.
 
Also check the top talkers page.

Latest revision as of 13:57, 30 October 2018

Back to Gaia

You can also set to send automatic alerts/emails from SmartView Monitor clicking on Tools - Start System Alert Daemon, and then configure/enable the thresholds on menu Gateway - Threshold Settings - Edit Global Settings.


Check firewall version and hotfixes status:

fw ver -k

Check cluster and virtual system status:

fw vsx stat -l
cphaprob state
cphaprob -a if
cphaprob -l list
iclid
>show cluster state

Check SecureXL and CoreXL:

fwaccel stat
fwaccel stat -s
fw ctl multik stat
fw ctl affinity -l -r
fw ctl affinity -l
sim affinity  -l

Check network errors:

ifconfig -a
netstat -I

Check CPU, Memory and Disk health:

cpstat -f cpu os
cpstat -f multi_cpu os
cpstat -f memory os
df -h
cpview -t

Check kernel's capacity:

fw ctl pstat  (Connections table)
fw tab -t connections | grep limit
fw tab -t connections -s
fw tab -t fwx_cache -s
fw ctl pstat | grep Aggressive
fw ctl get int fwx_max_conns

Checking the reason for drop

 fw ctl zdebug + drop | grep 'x.x.x.x\|y.y.y.y'

Also check the top talkers page.