topic Re: Detect blades problems via CLI in Firewall and Security Management

Detect blades problems via CLI

Sabi_Halevi — Mon, 01 Mar 2021 09:02:25 GMT

Hi,

What is the best practice for detect blade problems via CLI?

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638#Security%20Gateway%20Software%20Blades%20and%20Features%20-%20IPSec%20VPN%20Blade
In this sk there is a way to monitor the blades with watchdog command 'cpwd_admin list',
But what about the blades that don't monitor by the watchdog ?

Please advise

Thanks

Re: Detect blades problems via CLI

G_W_Albrecht — Mon, 01 Mar 2021 10:17:09 GMT

Did you try the cpstat cli command yet ?

Re: Detect blades problems via CLI

Sabi_Halevi — Mon, 01 Mar 2021 11:36:28 GMT

Thanks!
A.Its what I was looking for.

B. I assume the status code '0' is OK, what about the other ones '1,2'?

Also, there are more ways to detect blade problems via CLI?

Many Thanks!

Re: Detect blades problems via CLI

G_W_Albrecht — Mon, 01 Mar 2021 11:55:22 GMT

That depends - cpstat can do a lot, and most is shown verbose, like

# cpstat antimalware -f update_status

# cpstat os -f licensing

# cpstat threat-emulation -f contract

# cpstat -f RAD_status urlf

In the CP R80.40 CLI Reference Guide p.186ff you can find a lot of examples, but documentation is very limited ! You can always contact TAC for more details on the commands, the results and their meaning.

And i would apprecite a Kudo 8)