topic Re: Gaia HealthCheck Script v4.13 released in Firewall and Security Management

Gaia HealthCheck Script v4.13 released

Danny — Wed, 04 Jul 2018 07:41:38 GMT

Check Point just released v4.13 of it's Gaia HealthCheck Script.

Whats new:

improved VS handling
improved user interface (show help info, script version & build number)
new: flag parsing
new outputs (aggressive aging status, warnings)
new error checks (fw ctl pstat, fwaccel, NAT, connections table, fragmented packets, RX missed & drop checks)
improved script code (/dev/null pipes, temp file removal, fwaccel dependencies)
better script code documentation

Download

Package	Link	Date
healthcheck.sh script v4.13		2 July 2018

Re: Gaia HealthCheck Script v4.13 released

G_W_Albrecht — Wed, 04 Jul 2018 10:00:41 GMT

I just have tried it on R80.20 EA, but i see two strange errors:

# Misc. Messages Checks:
#########################
"Global param: operation failed: Unknown parameter" message detected:
Defined kernel parameters or their values are not valid.
For more information, refer to sk87006.

sk87006 refers to $FWDIR/boot/modules/fwkern.conf and $FWDIR/boot/modules/vpnkern.conf that both do not exist on this GW, so it could not be a kernel Parameter set wrongly; but in /var/log/messages i find details:

Jul 3 08:44:28 2018 GW_80 kernel: [fw4_0];Global param: operation failed: Unknown parameter (param name curr_expension_dev_id)
Jul 3 08:44:28 2018 GW_80 kernel: [fw4_0];Global param: operation failed: Unknown parameter (param name cphwd_expension_slot_num)
Jul 3 08:44:28 2018 GW_80 kernel: [fw4_0];Global param: operation failed: Unknown parameter (param name cphwd_curr_expension_card_type)

# SecureXL Checks:
##########################
SecureXL Information:
Unable to determine accelerator status.
Please run "fwaccel stat" for further details.

So i do:

Accept Templates : enabled
Drop Templates : enabled
NAT Templates : enabled

Re: Gaia HealthCheck Script v4.13 released

JozkoMrkvicka — Thu, 12 Jul 2018 21:46:46 GMT

What performance says about it ? I run early versions on some very (like VERY) utilized active cluster member and script was not able to handle some of checks. Wouldnt it be benefit to add something like delay between each checks ? for example:

./script.sh 10

means each check will be performed after 10 seconds of doing nothing.

Re: Gaia HealthCheck Script v4.13 released

JozkoMrkvicka — Sat, 14 Jul 2018 19:41:03 GMT

Gaia HealthCheck Script v 5.0 is out with support of R80 API calls to remotely execute a health check on a specified Gateway.

I am surprised that there is still no check for RAID status and PSU status ?!

Why there is no thread about this topic ? I am sure that Check Point users have many suggestions how to improve this briliant tool... just an idea...