topic Re: Health Check Script Analysis in General Topics

Health Check Script Analysis

Di_Junior — Tue, 09 Oct 2018 11:34:35 GMT

Dear Mates

I have been looking into the healthcheck script, and I have a question about the system uptime section. Why does it generate a Warning if the system has not been rebooted over a year? what is this criteria based on? is it related to the appliance maintenance ? I got this warning after running the script, and I would like to understand why is it a "problem".

Another question is related to the Smart Preventive Maintenance, does Check Point have a recommended time frame where the systems have to go through a Smart Preventive Maintenance? like cleaning the funs, power supply, etc.

Re: Health Check Script Analysis

G_W_Albrecht — Tue, 09 Oct 2018 12:37:47 GMT

This criteria is based on experience. It has happened that a device rebooted after a longer uptime did not come up again as the file system was corrupted. Regular reboot ( every 2 - 4 weeks) is mostly able to repair minor file system errors with the automatic fsck called upon boot.

Re: Health Check Script Analysis

Di_Junior — Tue, 09 Oct 2018 12:53:28 GMT

Thank you very much.

Re: Health Check Script Analysis

JozkoMrkvicka — Tue, 09 Oct 2018 19:48:14 GMT

From audit point of view, "best practise" is to perform regular reboot of every firewall...

The same applied to perform regular restore from backup on every Check Point appliance type.

... but we all know how impossible is to do that...

PS: Not sure if Check Point Health Check script is checking status of backups. Maybe idea for next update

Re: Health Check Script Analysis

Ofir_Shikolski — Wed, 10 Oct 2018 05:22:29 GMT

if the GW is up for 1 year, this mean that your not patch the device to recommended patch level(=Jumbo).

We can hit an issue that already discovered and resolved, or missed imported enhancements