https://community.checkpoint.com/t5/Scripts/VPN-tunnels-report-script/m-p/268477#M1378 <P>Hey guys,</P> <P>This script provided report on VPN tunnels on the gateway.</P> <P>&nbsp;</P> <P>Script attached. dos2unix and chmod 777 needed before running it.</P> <P>&nbsp;</P> <P>Their output:</P> <P>&nbsp;</P> <DIV>Check Point Gateway VPN Runtime Report - HQFW1-84 - 20260123_102122</DIV> <DIV>Generated: 2026-01-23T10:21:22-0500</DIV> <DIV>&nbsp;</DIV> <DIV>==================================================================</DIV> <DIV>## System Version (clish)</DIV> <DIV>## Command: clish -c show version all</DIV> <DIV>## Time: 2026-01-23T10:21:22-0500</DIV> <DIV>==================================================================</DIV> <DIV>&nbsp;</DIV> <DIV>Product version Check Point Gaia R81.20</DIV> <DIV>OS build 631</DIV> <DIV>OS kernel version 3.10.0-1160.15.2cpx86_64</DIV> <DIV>OS edition 64-bit</DIV> <DIV>&nbsp;</DIV> <DIV>==================================================================</DIV> <DIV>## VPN Statistics (cpstat -f all vpn)</DIV> <DIV>## Command: cpstat -f all vpn</DIV> <DIV>## Time: 2026-01-23T10:21:23-0500</DIV> <DIV>==================================================================</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>Encrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>Decrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>Encryption errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 5</DIV> <DIV>Decryption errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 278</DIV> <DIV>Connection related errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 97</DIV> <DIV>Product:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; IPSec VPN</DIV> <DIV>Major version:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 6</DIV> <DIV>Minor version:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>Kernel build num.:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 997000020</DIV> <DIV>IKE current SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1</DIV> <DIV>IKE current SAs initiated by me:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IKE current SAs initiated by peer:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1</DIV> <DIV>IKE max concurrent SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2</DIV> <DIV>IKE max concurrent SAs initiated by me:&nbsp; &nbsp; &nbsp; &nbsp;1</DIV> <DIV>IKE max concurrent SAs initiated by peer:&nbsp; &nbsp; &nbsp;1</DIV> <DIV>IKE total SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 243</DIV> <DIV>IKE total SAs initiated by me:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 57</DIV> <DIV>IKE total SAs initiated by peer:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 186</DIV> <DIV>IKE total SA attempts:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 127</DIV> <DIV>IKE total SA attempts initiated by me:&nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IKE total SA attempts initiated by peer:&nbsp; &nbsp; &nbsp; 127</DIV> <DIV>IKE current ongoing SA negotiations:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IKE max concurrent SA negotiations:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1</DIV> <DIV>IKE no response from peer (initiator errors): 0</DIV> <DIV>IKE total failures (initiator errors):&nbsp; &nbsp; &nbsp; &nbsp; 33</DIV> <DIV>IKE total failures (responder errors):&nbsp; &nbsp; &nbsp; &nbsp; 167</DIV> <DIV>IKE total failures (initiator + responder):&nbsp; &nbsp;200</DIV> <DIV>IPsec current Inbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 2</DIV> <DIV>IPsec current Outbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1</DIV> <DIV>IPsec max concurrent Inbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2</DIV> <DIV>IPsec max concurrent Outbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1</DIV> <DIV>IPsec total Inbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 7049</DIV> <DIV>IPsec total Outbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;7049</DIV> <DIV>IPsec number of VPN-1 peers:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1</DIV> <DIV>IPsec maximum number of VPN-1 peers:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 2</DIV> <DIV>IPsec number of VPN-1 RA peers:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec maximum number of VPN-1 RA peers:&nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec decryption errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec authentication errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec replay errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec Connection related errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec unknown SPI errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec other inbound errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;278</DIV> <DIV>IPsec other outbound errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec UDP encrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec UDP decrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec encrypted bytes:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec decrypted bytes:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec encrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec decrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec bytes before decompression:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec bytes after decompression:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec bytes decompression overhead:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec packets decompressed:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec decompression errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec bytes before compression:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec bytes after compression:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec bytes compression overhead:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec bytes non compressible:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec packets compressed:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec packets non compressible:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec compression errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>HW accel. vendor:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;None</DIV> <DIV>HW accel. status:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Off</DIV> <DIV>HW accel. driver major version:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>HW accel. driver minor version:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>HW accel. encrypted IPsec packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. decrypted IPsec packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. encrypted IPsec bytes:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. decrypted IPsec bytes:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. encryption errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. decrytpion errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. context errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec NIC: Number of IPsec NIC's&nbsp; &nbsp;:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec NIC: Current SA's :&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec NIC: Total SA's&nbsp; &nbsp;:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec NIC: Decrypted bytes by NIC&nbsp; :&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec NIC: Encrypted bytes by NIC&nbsp; :&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec NIC: Decrypted packets by NIC:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec NIC: Encrypted packets by NIC:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>==================================================================</DIV> <DIV>## Active IKE SAs (vpn tu -w list ike)</DIV> <DIV>## Command: vpn tu -w list ike</DIV> <DIV>## Time: 2026-01-23T10:21:23-0500</DIV> <DIV>==================================================================</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>Peer 156.137.39.21 , DHL-GW-156.137.39.21 SAs:</DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> IKE SA &lt;3eac3f724ad73858,4fef3098d56672fc&gt;</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>==================================================================</DIV> <DIV>## Active IPsec SAs (vpn tu -w list ipsec)</DIV> <DIV>## Command: vpn tu -w list ipsec</DIV> <DIV>## Time: 2026-01-23T10:21:23-0500</DIV> <DIV>==================================================================</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>Peer 156.137.39.21 , DHL-GW-156.137.39.21 SAs:</DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> IKE SA &lt;3eac3f724ad73858,4fef3098d56672fc&gt;</SPAN></DIV> <DIV><SPAN> INBOUND:</SPAN></DIV> <DIV><SPAN> 1. 0xcf82bff7 (i: 3)</SPAN></DIV> <DIV><SPAN> 2. 0xc989e04 (i: 3)</SPAN></DIV> <DIV><SPAN> OUTBOUND:</SPAN></DIV> <DIV><SPAN> 1. 0xf4977076 (i: 3)</SPAN></DIV> Wed, 27 May 2026 10:22:27 GMT the_rock 2026-05-27T10:22:27Z https://community.checkpoint.com/t5/Scripts/VPN-tunnels-report-script/m-p/268477#M1378 11 Wed, 27 May 2026 10:22:27 GMT https://community.checkpoint.com/t5/Scripts/VPN-tunnels-report-script/m-p/268477#M1378 the_rock 2026-05-27T10:22:27Z https://community.checkpoint.com/t5/Scripts/VPN-tunnels-report-script/m-p/269773#M1430 <P>Works well!&nbsp;</P> <LI-CODE lang="markup">Check Point Gateway VPN Runtime Report - ****** - 20260205_125840 Generated: 2026-02-05T12:58:40+0100 ================================================================== ## System Version (clish) ## Command: clish -c show version all ## Time: 2026-02-05T12:58:40+0100 ================================================================== Product version Check Point Gaia R81.20 OS build 631 OS kernel version 3.10.0-1160.15.2cpx86_64 OS edition 64-bit ================================================================== ## VPN Statistics (cpstat -f all vpn) ## Command: cpstat -f all vpn ## Time: 2026-02-05T12:58:40+0100 ================================================================== Encrypted packets: 0 Decrypted packets: 0 Encryption errors: 0 Decryption errors: 0 Connection related errors: 0 Product: IPSec VPN Major version: 6 Minor version: 0 Kernel build num.: 997000016 IKE current SAs: 94 IKE current SAs initiated by me: 9 IKE current SAs initiated by peer: 85 </LI-CODE> <P>&nbsp;</P> Thu, 05 Feb 2026 12:00:19 GMT https://community.checkpoint.com/t5/Scripts/VPN-tunnels-report-script/m-p/269773#M1430 Vincent_Bacher 2026-02-05T12:00:19Z https://community.checkpoint.com/t5/Scripts/VPN-tunnels-report-script/m-p/269776#M1431 <P>Glad its helpful.</P> Thu, 05 Feb 2026 12:16:30 GMT https://community.checkpoint.com/t5/Scripts/VPN-tunnels-report-script/m-p/269776#M1431 the_rock 2026-02-05T12:16:30Z