topic Monitoring Checkpoint - healthcheck, performance etc. in Firewall and Security Management

Monitoring Checkpoint - healthcheck, performance etc.

ARycroft — Thu, 13 Oct 2022 13:15:33 GMT

Hi,

We have Checkpoint 6900 cluster firewalls, is there a tool (3rd Party/Checkpoint) to Monitor these devices and provide a healthcheck, status and performance reports?

Kind regards

Andrew Rycroft

Re: Monitoring Checkpoint - healthcheck, performance etc.

PhoneBoy — Thu, 13 Oct 2022 20:09:50 GMT

It really depends exactly on what you're trying to monitor about the devices.
You can start with Health Check Point (HCP), which can even show you the data in SmartConsole through an extension: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk171436&partition=Basic&product=Quantum

Skyline (currently in EA) can also be used to export performance data to anything that supports OpenTelemetry (we support Grafana/Prometheus).
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk178566&partition=Advanced&product=Quantum

cpview (executed from the relevant gateway) can be used to view some real-time performance data and is useful for troubleshooting performance-related issues.

You can also monitor with SNMP tools, though you have to know exactly what MIBs to probe.
Indeni (a third party tool) is another possible option.

Re: Monitoring Checkpoint - healthcheck, performance etc.

Ruan_Kotze — Thu, 13 Oct 2022 20:12:33 GMT

Hi Andrew,

Check Point has published Health Check Point (HCP) and Skyline. There's also the HealthCheck script - but I think that is being deprecated in favor of HCP.

You can also easily integrate 3rd party monitoring solutions (PRTG, Zabbix etc.) via SNMP.

Cheers,
Ruan