https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268455#M45082 <P>Hey guys,</P> <P>Wondering if someone would be willing to test this script? I gave it to a customer with just single tunnel and it appars it did work (output below), but I wanted to see what it would give for gateway with multiple vpn tunnels.</P> <P>&nbsp;</P> <P>Tx in advance.</P> <P>&nbsp;</P> <P>Script attached. dos2unix and chmod 777 needed before running it.</P> <P>&nbsp;</P> <P>Their output:</P> <P>&nbsp;</P> <DIV>Check Point Gateway VPN Runtime Report - HQFW1-84 - 20260123_102122</DIV> <DIV>Generated: 2026-01-23T10:21:22-0500</DIV> <DIV>&nbsp;</DIV> <DIV>==================================================================</DIV> <DIV>## System Version (clish)</DIV> <DIV>## Command: clish -c show version all</DIV> <DIV>## Time: 2026-01-23T10:21:22-0500</DIV> <DIV>==================================================================</DIV> <DIV>&nbsp;</DIV> <DIV>Product version Check Point Gaia R81.20</DIV> <DIV>OS build 631</DIV> <DIV>OS kernel version 3.10.0-1160.15.2cpx86_64</DIV> <DIV>OS edition 64-bit</DIV> <DIV>&nbsp;</DIV> <DIV>==================================================================</DIV> <DIV>## VPN Statistics (cpstat -f all vpn)</DIV> <DIV>## Command: cpstat -f all vpn</DIV> <DIV>## Time: 2026-01-23T10:21:23-0500</DIV> <DIV>==================================================================</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>Encrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>Decrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>Encryption errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 5</DIV> <DIV>Decryption errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 278</DIV> <DIV>Connection related errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 97</DIV> <DIV>Product:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; IPSec VPN</DIV> <DIV>Major version:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 6</DIV> <DIV>Minor version:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>Kernel build num.:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 997000020</DIV> <DIV>IKE current SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1</DIV> <DIV>IKE current SAs initiated by me:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IKE current SAs initiated by peer:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1</DIV> <DIV>IKE max concurrent SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2</DIV> <DIV>IKE max concurrent SAs initiated by me:&nbsp; &nbsp; &nbsp; &nbsp;1</DIV> <DIV>IKE max concurrent SAs initiated by peer:&nbsp; &nbsp; &nbsp;1</DIV> <DIV>IKE total SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 243</DIV> <DIV>IKE total SAs initiated by me:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 57</DIV> <DIV>IKE total SAs initiated by peer:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 186</DIV> <DIV>IKE total SA attempts:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 127</DIV> <DIV>IKE total SA attempts initiated by me:&nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IKE total SA attempts initiated by peer:&nbsp; &nbsp; &nbsp; 127</DIV> <DIV>IKE current ongoing SA negotiations:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IKE max concurrent SA negotiations:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1</DIV> <DIV>IKE no response from peer (initiator errors): 0</DIV> <DIV>IKE total failures (initiator errors):&nbsp; &nbsp; &nbsp; &nbsp; 33</DIV> <DIV>IKE total failures (responder errors):&nbsp; &nbsp; &nbsp; &nbsp; 167</DIV> <DIV>IKE total failures (initiator + responder):&nbsp; &nbsp;200</DIV> <DIV>IPsec current Inbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 2</DIV> <DIV>IPsec current Outbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1</DIV> <DIV>IPsec max concurrent Inbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2</DIV> <DIV>IPsec max concurrent Outbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1</DIV> <DIV>IPsec total Inbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 7049</DIV> <DIV>IPsec total Outbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;7049</DIV> <DIV>IPsec number of VPN-1 peers:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1</DIV> <DIV>IPsec maximum number of VPN-1 peers:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 2</DIV> <DIV>IPsec number of VPN-1 RA peers:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec maximum number of VPN-1 RA peers:&nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec decryption errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec authentication errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec replay errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec Connection related errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec unknown SPI errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec other inbound errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;278</DIV> <DIV>IPsec other outbound errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec UDP encrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec UDP decrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec encrypted bytes:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec decrypted bytes:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec encrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec decrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec bytes before decompression:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec bytes after decompression:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec bytes decompression overhead:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec packets decompressed:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec decompression errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec bytes before compression:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec bytes after compression:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec bytes compression overhead:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec bytes non compressible:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec packets compressed:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec packets non compressible:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec compression errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>HW accel. vendor:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;None</DIV> <DIV>HW accel. status:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Off</DIV> <DIV>HW accel. driver major version:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>HW accel. driver minor version:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>HW accel. encrypted IPsec packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. decrypted IPsec packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. encrypted IPsec bytes:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. decrypted IPsec bytes:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. encryption errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. decrytpion errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. context errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec NIC: Number of IPsec NIC's&nbsp; &nbsp;:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec NIC: Current SA's :&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec NIC: Total SA's&nbsp; &nbsp;:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec NIC: Decrypted bytes by NIC&nbsp; :&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec NIC: Encrypted bytes by NIC&nbsp; :&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec NIC: Decrypted packets by NIC:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec NIC: Encrypted packets by NIC:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>==================================================================</DIV> <DIV>## Active IKE SAs (vpn tu -w list ike)</DIV> <DIV>## Command: vpn tu -w list ike</DIV> <DIV>## Time: 2026-01-23T10:21:23-0500</DIV> <DIV>==================================================================</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>Peer 156.137.39.21 , DHL-GW-156.137.39.21 SAs:</DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> IKE SA &lt;3eac3f724ad73858,4fef3098d56672fc&gt;</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>==================================================================</DIV> <DIV>## Active IPsec SAs (vpn tu -w list ipsec)</DIV> <DIV>## Command: vpn tu -w list ipsec</DIV> <DIV>## Time: 2026-01-23T10:21:23-0500</DIV> <DIV>==================================================================</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>Peer 156.137.39.21 , DHL-GW-156.137.39.21 SAs:</DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> IKE SA &lt;3eac3f724ad73858,4fef3098d56672fc&gt;</SPAN></DIV> <DIV><SPAN> INBOUND:</SPAN></DIV> <DIV><SPAN> 1. 0xcf82bff7 (i: 3)</SPAN></DIV> <DIV><SPAN> 2. 0xc989e04 (i: 3)</SPAN></DIV> <DIV><SPAN> OUTBOUND:</SPAN></DIV> <DIV><SPAN> 1. 0xf4977076 (i: 3)</SPAN></DIV> Fri, 23 Jan 2026 16:33:45 GMT the_rock 2026-01-23T16:33:45Z https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268455#M45082 <P>Hey guys,</P> <P>Wondering if someone would be willing to test this script? I gave it to a customer with just single tunnel and it appars it did work (output below), but I wanted to see what it would give for gateway with multiple vpn tunnels.</P> <P>&nbsp;</P> <P>Tx in advance.</P> <P>&nbsp;</P> <P>Script attached. dos2unix and chmod 777 needed before running it.</P> <P>&nbsp;</P> <P>Their output:</P> <P>&nbsp;</P> <DIV>Check Point Gateway VPN Runtime Report - HQFW1-84 - 20260123_102122</DIV> <DIV>Generated: 2026-01-23T10:21:22-0500</DIV> <DIV>&nbsp;</DIV> <DIV>==================================================================</DIV> <DIV>## System Version (clish)</DIV> <DIV>## Command: clish -c show version all</DIV> <DIV>## Time: 2026-01-23T10:21:22-0500</DIV> <DIV>==================================================================</DIV> <DIV>&nbsp;</DIV> <DIV>Product version Check Point Gaia R81.20</DIV> <DIV>OS build 631</DIV> <DIV>OS kernel version 3.10.0-1160.15.2cpx86_64</DIV> <DIV>OS edition 64-bit</DIV> <DIV>&nbsp;</DIV> <DIV>==================================================================</DIV> <DIV>## VPN Statistics (cpstat -f all vpn)</DIV> <DIV>## Command: cpstat -f all vpn</DIV> <DIV>## Time: 2026-01-23T10:21:23-0500</DIV> <DIV>==================================================================</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>Encrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>Decrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>Encryption errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 5</DIV> <DIV>Decryption errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 278</DIV> <DIV>Connection related errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 97</DIV> <DIV>Product:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; IPSec VPN</DIV> <DIV>Major version:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 6</DIV> <DIV>Minor version:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>Kernel build num.:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 997000020</DIV> <DIV>IKE current SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1</DIV> <DIV>IKE current SAs initiated by me:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IKE current SAs initiated by peer:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1</DIV> <DIV>IKE max concurrent SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2</DIV> <DIV>IKE max concurrent SAs initiated by me:&nbsp; &nbsp; &nbsp; &nbsp;1</DIV> <DIV>IKE max concurrent SAs initiated by peer:&nbsp; &nbsp; &nbsp;1</DIV> <DIV>IKE total SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 243</DIV> <DIV>IKE total SAs initiated by me:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 57</DIV> <DIV>IKE total SAs initiated by peer:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 186</DIV> <DIV>IKE total SA attempts:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 127</DIV> <DIV>IKE total SA attempts initiated by me:&nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IKE total SA attempts initiated by peer:&nbsp; &nbsp; &nbsp; 127</DIV> <DIV>IKE current ongoing SA negotiations:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IKE max concurrent SA negotiations:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1</DIV> <DIV>IKE no response from peer (initiator errors): 0</DIV> <DIV>IKE total failures (initiator errors):&nbsp; &nbsp; &nbsp; &nbsp; 33</DIV> <DIV>IKE total failures (responder errors):&nbsp; &nbsp; &nbsp; &nbsp; 167</DIV> <DIV>IKE total failures (initiator + responder):&nbsp; &nbsp;200</DIV> <DIV>IPsec current Inbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 2</DIV> <DIV>IPsec current Outbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1</DIV> <DIV>IPsec max concurrent Inbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2</DIV> <DIV>IPsec max concurrent Outbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1</DIV> <DIV>IPsec total Inbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 7049</DIV> <DIV>IPsec total Outbound SAs:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;7049</DIV> <DIV>IPsec number of VPN-1 peers:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1</DIV> <DIV>IPsec maximum number of VPN-1 peers:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 2</DIV> <DIV>IPsec number of VPN-1 RA peers:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec maximum number of VPN-1 RA peers:&nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec decryption errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec authentication errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec replay errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec Connection related errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec unknown SPI errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec other inbound errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;278</DIV> <DIV>IPsec other outbound errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec UDP encrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec UDP decrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec encrypted bytes:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec decrypted bytes:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec encrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec decrypted packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec bytes before decompression:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec bytes after decompression:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec bytes decompression overhead:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec packets decompressed:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec decompression errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec bytes before compression:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec bytes after compression:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec bytes compression overhead:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec bytes non compressible:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec packets compressed:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec packets non compressible:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec compression errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>HW accel. vendor:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;None</DIV> <DIV>HW accel. status:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Off</DIV> <DIV>HW accel. driver major version:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>HW accel. driver minor version:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>HW accel. encrypted IPsec packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. decrypted IPsec packets:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. encrypted IPsec bytes:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. decrypted IPsec bytes:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. encryption errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. decrytpion errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>HW accel. context errors:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec NIC: Number of IPsec NIC's&nbsp; &nbsp;:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec NIC: Current SA's :&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec NIC: Total SA's&nbsp; &nbsp;:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0</DIV> <DIV>IPsec NIC: Decrypted bytes by NIC&nbsp; :&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec NIC: Encrypted bytes by NIC&nbsp; :&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec NIC: Decrypted packets by NIC:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>IPsec NIC: Encrypted packets by NIC:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>==================================================================</DIV> <DIV>## Active IKE SAs (vpn tu -w list ike)</DIV> <DIV>## Command: vpn tu -w list ike</DIV> <DIV>## Time: 2026-01-23T10:21:23-0500</DIV> <DIV>==================================================================</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>Peer 156.137.39.21 , DHL-GW-156.137.39.21 SAs:</DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> IKE SA &lt;3eac3f724ad73858,4fef3098d56672fc&gt;</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>==================================================================</DIV> <DIV>## Active IPsec SAs (vpn tu -w list ipsec)</DIV> <DIV>## Command: vpn tu -w list ipsec</DIV> <DIV>## Time: 2026-01-23T10:21:23-0500</DIV> <DIV>==================================================================</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>Peer 156.137.39.21 , DHL-GW-156.137.39.21 SAs:</DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> IKE SA &lt;3eac3f724ad73858,4fef3098d56672fc&gt;</SPAN></DIV> <DIV><SPAN> INBOUND:</SPAN></DIV> <DIV><SPAN> 1. 0xcf82bff7 (i: 3)</SPAN></DIV> <DIV><SPAN> 2. 0xc989e04 (i: 3)</SPAN></DIV> <DIV><SPAN> OUTBOUND:</SPAN></DIV> <DIV><SPAN> 1. 0xf4977076 (i: 3)</SPAN></DIV> Fri, 23 Jan 2026 16:33:45 GMT https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268455#M45082 the_rock 2026-01-23T16:33:45Z https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268469#M45083 <P>I can test it on Monday. I am not responsible for the S2S VPN devices but I think there are dozens of active tunnels</P> Fri, 23 Jan 2026 19:12:49 GMT https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268469#M45083 Vincent_Bacher 2026-01-23T19:12:49Z https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268470#M45084 <P>Thanks! I will test it shortly on one of customer's fws, I know they have about 10 tunnels on that cluster.</P> Fri, 23 Jan 2026 19:18:31 GMT https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268470#M45084 the_rock 2026-01-23T19:18:31Z https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268472#M45085 <P>It works for multiples, 3/3 no issues.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="vpn_script.png" style="width: 632px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/32895i0170B7B7D11AA58A/image-size/large?v=v2&amp;px=999" role="button" title="vpn_script.png" alt="vpn_script.png" /></span></P> Fri, 23 Jan 2026 19:38:06 GMT https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268472#M45085 CaseyB 2026-01-23T19:38:06Z https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268473#M45086 <P>Awesome, thanks!</P> Fri, 23 Jan 2026 19:39:34 GMT https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268473#M45086 the_rock 2026-01-23T19:39:34Z https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268474#M45087 <P>Perhaps the output could be spruced up a bit; I'll play around with it a little on Monday. <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Fri, 23 Jan 2026 19:44:03 GMT https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268474#M45087 Vincent_Bacher 2026-01-23T19:44:03Z https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268475#M45088 <P>Anytime! It scaled to 40 without issues as well.</P> Fri, 23 Jan 2026 19:44:23 GMT https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268475#M45088 CaseyB 2026-01-23T19:44:23Z https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268478#M45089 <P>K, great, tx a lot!</P> Fri, 23 Jan 2026 19:46:12 GMT https://community.checkpoint.com/t5/General-Topics/VPN-report-script/m-p/268478#M45089 the_rock 2026-01-23T19:46:12Z