A way to restart CP endpoint service on Windows systems

[Firewall_Head]

Hi Checkmates,

During my daily job as an admin, I see the endpoint blades running into errors and this happens mainly with "AM" and "AR" blades. As a way to fix this, I would ask the customer to reboot the system which is quite a time-taking process and also a lot depends on getting a  prod server rebooted.

Can someone help me with a way to restart the specific service using the command line or a utility from CP, If this can't be discussed here, Can Check Point include this feature in their upcoming client version.

Any replies would greatly help me!

😊

====

WR

FH

[Chris_Atkinson]

Performing Push Operations provides restart / shutdown / repair options as it currently stands.

Tagging @BarYassure for visibility. 

[Firewall_Head]

@Chris_Atkinson , thanks for the quick response.

Will repairing the client cause a reboot of the system?

===

WR

FH

[Chris_Atkinson]

Under agent settings section of push operations in the linked documentation it states:

"Repairs the Endpoint Security client installation. This requires a computer restart."

[Firewall_Head]

Thanks @Chris_Atkinson ,

I'm still expecting an alternate viable solution from Check Point.😀

====

WR

FH

[Chris_Atkinson]

Please raise this need as an RFE with your local SE / CP office.

[lluner]

@Firewall_Head 

The only way I see it is this way. There is no practical way to make any repairs to any antivirus process

Interromper o processo de endpoint - CheckMates de ponto de verificação

[PhoneBoy]

I’m fairly certain that the AntiMalware and AntiRansomware functions use kernel-level functions to do what they do.
A simple “restart of services” may not resolve certain issues that only a reboot can.

Have you worked with TAC on the various errors you’ve received?

[Firewall_Head]

Hi @PhoneBoy ,

Have worked on this with TAC multiple times, step has always been restarting the services using the CPDiag utility. I'm not sure how to use it, If Check Point could release that as an SK article, it'd be great 😀.

====

WR

FH

[PhoneBoy]

The only cpdiag I am familiar with (albeit vaguely) is on the Security Gateway/Management side.
However, it makes sense a similar framework also exists in our Endpoint client.