topic Critical File Watcher in Scripts

Critical File Watcher

TurgutKaplanogl — Mon, 23 Mar 2026 18:15:07 GMT

Re: Critical File Watcher - For Upgrade & Migration

the_rock — Thu, 06 Nov 2025 15:07:31 GMT

AMAZING! Just so people dont wonder, it might be needed to run dos2unix and chmod commands, but works fine!

Re: Critical File Watcher

PhoneBoy — Thu, 13 Nov 2025 14:13:18 GMT

Officially in Toolbox now

Re: Critical File Watcher

the_rock — Thu, 13 Nov 2025 23:14:22 GMT

Gave it to couple of customers, they found the script super useful.

Re: Critical File Watcher

waozcan — Fri, 14 Nov 2025 06:40:44 GMT

Very useful- especially for migrations. Thanks!

Re: Critical File Watcher

Nurullah_Kazar — Fri, 14 Nov 2025 06:51:24 GMT

Great work, thanks for sharing.

Re: Critical File Watcher

ali-eksi — Fri, 14 Nov 2025 07:41:18 GMT

This is so useful!

And color coding makes it clear.

Re: Critical File Watcher

the_rock — Fri, 14 Nov 2025 12:14:42 GMT

100%

Re: Critical File Watcher

the_rock — Fri, 14 Nov 2025 12:33:58 GMT

For the context, output from my R82 lab fw:

[Expert@CP-GW:0]# ./check_critical_files.sh
============================================
==== Check Point Critical File Check ====
============================================

File modification dates:
------------------------------
/opt/CPcvpn-R82/conf/cvpnd.C : 2024-10-14 20:21:55.000000000 -0400
/opt/CPsuite-R82/fw1/boot/modules/fwkern.conf : 2025-11-06 15:50:14.492000000 -0500
/opt/CPsuite-R82/fw1/conf/cpha_bond_ls_config.conf : 2024-10-15 12:18:07.000000000 -0400
/opt/CPsuite-R82/fw1/conf/cpha_specific_vlan_data.conf : 2024-10-15 12:18:09.000000000 -0400
/opt/CPsuite-R82/fw1/conf/discntd.if : File not found
/opt/CPsuite-R82/fw1/conf/fw_fast_accel_export_configuration.conf : File not found
/opt/CPsuite-R82/fw1/conf/fwaffinity.conf : 2024-10-15 12:18:09.000000000 -0400
/opt/CPsuite-R82/fw1/conf/fwauthd.conf : 2025-11-05 08:30:05.974000000 -0500
/opt/CPsuite-R82/fw1/conf/hsm_configuration.C : 2024-10-15 12:18:03.000000000 -0400
/opt/CPsuite-R82/fw1/conf/identity_broker.C : 2024-10-15 12:18:09.000000000 -0400
/opt/CPsuite-R82/fw1/conf/ipassignment.conf : 2024-10-15 12:18:10.000000000 -0400
/opt/CPsuite-R82/fw1/conf/local.arp : File not found
/opt/CPsuite-R82/fw1/conf/malware_config : 2025-04-09 14:42:53.683000000 -0400
/opt/CPsuite-R82/fw1/conf/prioq.conf : 2025-04-09 14:50:51.686000000 -0400
/opt/CPsuite-R82/fw1/conf/rad_conf.C : 2024-10-15 12:20:33.000000000 -0400
/opt/CPsuite-R82/fw1/conf/synatk.conf : 2025-04-09 14:56:59.254000000 -0400
/opt/CPsuite-R82/fw1/conf/te.conf : 2025-11-11 08:58:30.772000000 -0500
/opt/CPsuite-R82/fw1/conf/thresholds.conf : 2024-10-15 12:20:33.000000000 -0400
/opt/CPsuite-R82/fw1/conf/trac_client_1.ttm : 2024-10-15 12:16:49.000000000 -0400
/opt/CPsuite-R82/fw1/conf/vsaffinity_exception.conf : 2024-10-15 12:18:09.000000000 -0400
/opt/CPppak-R82/conf/simkern.conf : File not found
/var/ace/sdconf.rec : 2025-04-09 15:44:26.093000000 -0400
/var/ace/sdopts.rec : 2025-04-09 15:44:26.092000000 -0400
/var/ace/sdstatus.12 : File not found
/var/ace/securid : File not found

Re: Critical File Watcher

the_rock — Sat, 15 Nov 2025 13:03:02 GMT

@TurgutKaplanogl

Just a thought I had...do you think there would be any way to actually show which files would be 100% needed if customer was to upgrade?

Re: Critical File Watcher

TurgutKaplanogl — Mon, 17 Nov 2025 09:41:08 GMT

Hello @the_rock

In my opinion, these files should be fully backed up before every upgrade and migration. This is already explicitly stated in the Upgrade & Installation Guide. However the critical point here is to check the modification dates of these files that come by default after first installation(or jumbo hot fix if needed). By doing so it can be determined whether any changes were made and after a fresh install or migration the modified files can be compared and transferred accordingly.

In other words these files are configured differently depending on various scenarios.

Thank you

Re: Critical File Watcher

the_rock — Mon, 17 Nov 2025 10:57:46 GMT

I agree 100% @TurgutKaplanogl