topic Re: Is there a module for health checks? in Ansible

Is there a module for health checks?

tawsif — Thu, 11 Mar 2021 20:58:18 GMT

Can someone please let me know if there's an Ansible module to run health checks on Checkpoint Firewall?

Re: Is there a module for health checks?

PhoneBoy — Fri, 12 Mar 2021 00:01:24 GMT

Is there a specific one? No.
However, you can use run script to run whatever you'd like in this regard.

Re: Is there a module for health checks?

the_rock — Fri, 12 Mar 2021 00:06:48 GMT

I cant recall now, but there are bunch of flags for that with cpstat command...anything in particular you are looking for?

Andy

Re: Is there a module for health checks?

tawsif — Fri, 12 Mar 2021 01:40:48 GMT

Just in general for any hardware checks, for example power supply failures. We want to create a playbook that can run daily health checks on all the firewalls in our network.

Re: Is there a module for health checks?

the_rock — Fri, 12 Mar 2021 03:15:56 GMT

Let me check few commands Friday morning and I will update you.

Andy

Re: Is there a module for health checks?

the_rock — Fri, 12 Mar 2021 13:22:42 GMT

Ok, so you can check this via web UI menu on the left (hardware monitoring), but also for specific firewall, you can do show asset all from clish or cpstat os -f all from regular shell. As far as doing it for multiple firewalls, as Dameon said, you can write up a script, though smart view monitor should also give you basic info.

Andy

Re: Is there a module for health checks?

_Val_ — Fri, 12 Mar 2021 14:30:01 GMT

We actually have a tool that does health checks, no need for scripting anything

Re: Is there a module for health checks?

the_rock — Fri, 12 Mar 2021 14:33:27 GMT

I know this is most likely what you are referring to, but I believe he is more looking for something hardware specific

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk121447

Andy

Re: Is there a module for health checks?

tawsif — Fri, 12 Mar 2021 14:53:24 GMT

This script is larger than 8Kb which is the max. size and I cannot load it via Gaia. Is there any other way to load it?

Re: Is there a module for health checks?

the_rock — Fri, 12 Mar 2021 14:55:45 GMT

You can use winscp to transfer it...just enable scp in ssh. chsh -s /bin/bash admin

Re: Is there a module for health checks?

JozkoMrkvicka — Fri, 12 Mar 2021 18:30:56 GMT

show sysenv all

show asset all

raid_diagnostic

Re: Is there a module for health checks?

the_rock — Fri, 12 Mar 2021 19:00:57 GMT

Those are all super useful, but Im still not sure thats what he is looking for...lets wait for confirmation : )

Andy

Re: Is there a module for health checks?

JozkoMrkvicka — Sat, 13 Mar 2021 06:39:01 GMT

In addition to that, almost everything related to hardware failures can be monitored by native SNMP:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98552

Re: Is there a module for health checks?

_Val_ — Mon, 15 Mar 2021 07:28:30 GMT

Not really, that was an old one. Check this out: sk171436