topic Re: Checking the number of connection on a specific IP in General Topics

Checking the number of connection on a specific IP

Di_Junior — Fri, 13 Mar 2020 10:20:22 GMT

Dear Mates

We have a couple of services published on the internet using static NAT on our Check Point Firewalls. I was asked whether it is possible to provide a total number of connections (accepted/dropped) by the firewall for a specific public address configgured on the firewall.

Thanks in advance

Re: Checking the number of connection on a specific IP

PhoneBoy — Sun, 15 Mar 2020 06:19:42 GMT

For active connections you could review the connections table (regular firewall or SecureXL).
For drops you probably have to look at the logs to determine this.

Re: Checking the number of connection on a specific IP

HeikoAnkenbrand — Sun, 15 Mar 2020 08:01:43 GMT

Current entries on the gateway in the connection table. Some of them are double.

# fw tab -t connections -u -f | grep <the ip> | wc -l

For SecureXL:

# fwaccel conns | grep <the ip> | wc -l

Or use the hit counter in the rule.