topic Re: CloudWatch Metrics in Cloud Firewall

CloudWatch Metrics

rjpereira — Tue, 25 Feb 2020 20:49:03 GMT

I found this article https://community.checkpoint.com/t5/CloudGuard-IaaS/AWS-CloudGuard-Monitoring-CloudWatch/td-p/37581 already from 2018 with some nice metrics on VPN tunnel metrics.

My gateways have metrics enabled with

echo '{"version":"1"}' > $FWDIR/conf/cloudwatch.json
cloudwatch start

but I end up only with a Namespace of "Checkpoint/AutoScalingGroup" and none of these multidimentional VPN metrics. I guess some other configuration on the instance is not right as my gateways have plenty of VPN connections to TGW and not having any of these metrics accessible.

Does anyone know how this works or refer me to any documentation on this part ?

Thanks

Re: CloudWatch Metrics

Daniel_Goldenst — Wed, 26 Feb 2020 06:38:02 GMT

Hi,

We have created a dedicated SK for Custom metrics in AWS Auto Scaling Groups, please check:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162592&partition=Internal&product=CloudGuard

Regards,

Daniel

Re: CloudWatch Metrics

rjpereira — Wed, 26 Feb 2020 19:11:16 GMT

Thank you for the link, although I don't think it addresses the question I asked: I have the Cloudwatch/AutoScaleGroup that the article refers to, available on the cloudwatch.

My question is that the metrics exposed in that namespace are very different from the ones I see visualized on the dashboard that I linked, which go much more about VPN and tunnel level metrics, not ASG.

How can those VPN metrics be also enabled ?

Thanks

Re: CloudWatch Metrics

Daniel_Goldenst — Wed, 26 Feb 2020 20:13:28 GMT

Currently we expose a closed set of metrics as part of our CloudWatch integration.

Additional metrics can be pulled out from the GW via CPVIEW feature available on every Security GW.