topic Re: A way to restart CP endpoint service on Windows systems in Endpoint

A way to restart CP endpoint service on Windows systems

Firewall_Head — Wed, 29 Jan 2025 08:15:54 GMT

Hi Checkmates,

During my daily job as an admin, I see the endpoint blades running into errors and this happens mainly with "AM" and "AR" blades. As a way to fix this, I would ask the customer to reboot the system which is quite a time-taking process and also a lot depends on getting a prod server rebooted.

Can someone help me with a way to restart the specific service using the command line or a utility from CP, If this can't be discussed here, Can Check Point include this feature in their upcoming client version.

Any replies would greatly help me!

😊

====

Re: A way to restart CP endpoint service on Windows systems

Chris_Atkinson — Wed, 29 Jan 2025 08:30:46 GMT

Performing Push Operations provides restart / shutdown / repair options as it currently stands.

Tagging @BarYassure for visibility.

Re: A way to restart CP endpoint service on Windows systems

Firewall_Head — Wed, 29 Jan 2025 10:50:16 GMT

@Chris_Atkinson , thanks for the quick response.

Will repairing the client cause a reboot of the system?

===

Re: A way to restart CP endpoint service on Windows systems

Chris_Atkinson — Wed, 29 Jan 2025 10:58:13 GMT

Under agent settings section of push operations in the linked documentation it states:

"Repairs the Endpoint Security client installation. This requires a computer restart."

Re: A way to restart CP endpoint service on Windows systems

Firewall_Head — Wed, 29 Jan 2025 11:08:04 GMT

Thanks @Chris_Atkinson ,

I'm still expecting an alternate viable solution from Check Point.😀

====

Re: A way to restart CP endpoint service on Windows systems

Chris_Atkinson — Wed, 29 Jan 2025 11:34:26 GMT

Please raise this need as an RFE with your local SE / CP office.

Re: A way to restart CP endpoint service on Windows systems

lluner — Wed, 29 Jan 2025 12:40:54 GMT

@Firewall_Head

The only way I see it is this way. There is no practical way to make any repairs to any antivirus process

Interromper o processo de endpoint - CheckMates de ponto de verificação

Re: A way to restart CP endpoint service on Windows systems

PhoneBoy — Wed, 29 Jan 2025 15:17:19 GMT

I’m fairly certain that the AntiMalware and AntiRansomware functions use kernel-level functions to do what they do.
A simple “restart of services” may not resolve certain issues that only a reboot can.

Have you worked with TAC on the various errors you’ve received?

Re: A way to restart CP endpoint service on Windows systems

Firewall_Head — Thu, 30 Jan 2025 06:53:38 GMT

Hi @PhoneBoy ,

Have worked on this with TAC multiple times, step has always been restarting the services using the CPDiag utility. I'm not sure how to use it, If Check Point could release that as an SK article, it'd be great 😀.

====

Re: A way to restart CP endpoint service on Windows systems

PhoneBoy — Thu, 30 Jan 2025 15:00:42 GMT

The only cpdiag I am familiar with (albeit vaguely) is on the Security Gateway/Management side.
However, it makes sense a similar framework also exists in our Endpoint client.