Difference between revisions of "Performance Monitoring"
From Tech-Wiki
(Created page with "Category:Check Point '''Back to Gaia''' Check firewall version and hotfixes status: fw ver -k Check cluster and virtual system status: fw vsx stat...") |
|||
(12 intermediate revisions by the same user not shown) | |||
Line 1: | Line 1: | ||
[[Category:Check Point]] | [[Category:Check Point]] | ||
'''[[Check Point#Gaia|Back to Gaia]]''' | '''[[Check Point#Gaia|Back to Gaia]]''' | ||
+ | |||
+ | You can also set to send automatic alerts/emails from SmartView Monitor clicking on Tools - Start System Alert Daemon, and then configure/enable the thresholds on menu Gateway - Threshold Settings - Edit Global Settings. | ||
+ | |||
Check firewall version and hotfixes status: | Check firewall version and hotfixes status: | ||
Line 9: | Line 12: | ||
cphaprob state | cphaprob state | ||
cphaprob -a if | cphaprob -a if | ||
+ | cphaprob -l list | ||
+ | iclid | ||
+ | >show cluster state | ||
+ | |||
+ | Check SecureXL and CoreXL: | ||
fwaccel stat | fwaccel stat | ||
+ | fwaccel stat -s | ||
+ | fw ctl multik stat | ||
+ | fw ctl affinity -l -r | ||
+ | fw ctl affinity -l | ||
+ | sim affinity -l | ||
Check network errors: | Check network errors: | ||
Line 20: | Line 33: | ||
cpstat -f memory os | cpstat -f memory os | ||
df -h | df -h | ||
+ | cpview -t | ||
Check kernel's capacity: | Check kernel's capacity: | ||
Line 28: | Line 42: | ||
fw ctl pstat | grep Aggressive | fw ctl pstat | grep Aggressive | ||
fw ctl get int fwx_max_conns | fw ctl get int fwx_max_conns | ||
+ | |||
+ | Checking the reason for drop | ||
+ | fw ctl zdebug + drop | grep 'x.x.x.x\|y.y.y.y' | ||
Also check the top talkers page. | Also check the top talkers page. |
Latest revision as of 13:57, 30 October 2018
You can also set to send automatic alerts/emails from SmartView Monitor clicking on Tools - Start System Alert Daemon, and then configure/enable the thresholds on menu Gateway - Threshold Settings - Edit Global Settings.
Check firewall version and hotfixes status:
fw ver -k
Check cluster and virtual system status:
fw vsx stat -l cphaprob state cphaprob -a if cphaprob -l list iclid >show cluster state
Check SecureXL and CoreXL:
fwaccel stat fwaccel stat -s fw ctl multik stat fw ctl affinity -l -r fw ctl affinity -l sim affinity -l
Check network errors:
ifconfig -a netstat -I
Check CPU, Memory and Disk health:
cpstat -f cpu os cpstat -f multi_cpu os cpstat -f memory os df -h cpview -t
Check kernel's capacity:
fw ctl pstat (Connections table) fw tab -t connections | grep limit fw tab -t connections -s fw tab -t fwx_cache -s fw ctl pstat | grep Aggressive fw ctl get int fwx_max_conns
Checking the reason for drop
fw ctl zdebug + drop | grep 'x.x.x.x\|y.y.y.y'
Also check the top talkers page.