topic Re: Link State Monitor in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Link-State-Monitor/m-p/5706#M207 <HTML><HEAD></HEAD><BODY><P>I assume you are referring to the --watch option of mii_tool which is no longer available.</P><P></P><P>A couple possible ways to proceed:</P><P></P><P>1) All link state changes are logged to syslog on the gateway by default.&nbsp; If the gateway syslog server is configured to forward all its entries (or just the ones you want) to an external syslog server such as Splunk, that system could watch for these link state change events and fire the alert you want.</P><P></P><P>2) You can also create a custom SNMP trap to do this from the Gaia web interface, you'll just need to figure out the OID for a link state change in the proper MIB.</P><P></P><P>3) Also check out the threshold_config command mentioned in sk90860 which may be able to do what you want.</P><P></P><P>4) Finally you could configure forwarding of all gateway syslog logs into the normal Check Point logging mechanism as specified in sk102995, then configure an Automatic Reaction in SmartEvent if you have that product available in your environment.</P><P></P><P>--<BR /> My book "Max Power: Check Point Firewall Performance Optimization" <BR /> now available via <A href="http://maxpowerfirewalls.com" target="_blank">http://maxpowerfirewalls.com</A>.</P></BODY></HTML> Sun, 27 Aug 2017 13:59:33 GMT Timothy_Hall 2017-08-27T13:59:33Z Link State Monitor https://community.checkpoint.com/t5/Firewall-and-Security-Management/Link-State-Monitor/m-p/5705#M206 <HTML><HEAD></HEAD><BODY><P>hey</P><P></P><P>how can i follow link state messages on gaia ?</P><P>i would like to disconnect a NIC and get t message on which NIC state went down &amp; up.</P><P></P><P>i used to do it with mii-tools but its not available anymore</P><P>what command do you suggest to use ?&nbsp;</P></BODY></HTML> Sun, 27 Aug 2017 10:23:16 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Link-State-Monitor/m-p/5705#M206 Dor_Marcovitch 2017-08-27T10:23:16Z Re: Link State Monitor https://community.checkpoint.com/t5/Firewall-and-Security-Management/Link-State-Monitor/m-p/5706#M207 <HTML><HEAD></HEAD><BODY><P>I assume you are referring to the --watch option of mii_tool which is no longer available.</P><P></P><P>A couple possible ways to proceed:</P><P></P><P>1) All link state changes are logged to syslog on the gateway by default.&nbsp; If the gateway syslog server is configured to forward all its entries (or just the ones you want) to an external syslog server such as Splunk, that system could watch for these link state change events and fire the alert you want.</P><P></P><P>2) You can also create a custom SNMP trap to do this from the Gaia web interface, you'll just need to figure out the OID for a link state change in the proper MIB.</P><P></P><P>3) Also check out the threshold_config command mentioned in sk90860 which may be able to do what you want.</P><P></P><P>4) Finally you could configure forwarding of all gateway syslog logs into the normal Check Point logging mechanism as specified in sk102995, then configure an Automatic Reaction in SmartEvent if you have that product available in your environment.</P><P></P><P>--<BR /> My book "Max Power: Check Point Firewall Performance Optimization" <BR /> now available via <A href="http://maxpowerfirewalls.com" target="_blank">http://maxpowerfirewalls.com</A>.</P></BODY></HTML> Sun, 27 Aug 2017 13:59:33 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Link-State-Monitor/m-p/5706#M207 Timothy_Hall 2017-08-27T13:59:33Z Re: Link State Monitor https://community.checkpoint.com/t5/Firewall-and-Security-Management/Link-State-Monitor/m-p/5707#M208 <HTML><HEAD></HEAD><BODY><P class="">TIl -f /var/log/messages</P></BODY></HTML> Sun, 27 Aug 2017 20:50:07 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Link-State-Monitor/m-p/5707#M208 aner_sagi 2017-08-27T20:50:07Z