Health Check Script Analysis

[Di_Junior]

Dear Mates

I have been looking into the healthcheck script, and I have a question about the system uptime section. Why does it generate a Warning if the system has not been rebooted over a year? what is this criteria based on? is it related to the appliance maintenance ? I got this warning after running the script, and I would like to understand why is it a "problem".

Another question is related to the Smart Preventive Maintenance, does Check Point have a recommended time frame where the systems have to go through a Smart Preventive Maintenance? like cleaning the funs, power supply, etc.

[G_W_Albrecht]

This criteria is based on experience. It has happened that a device rebooted after a longer uptime did not come up again  as the file system was corrupted. Regular reboot ( every 2 - 4 weeks) is mostly able to repair minor file system errors with the automatic fsck called upon boot.

[Di_Junior]

Thank you very much.

[JozkoMrkvicka]

From audit point of view,  "best practise" is to perform regular reboot of every firewall...

The same applied to perform regular restore from backup on every Check Point appliance type.

... but we all know how impossible is to do that...

PS: Not sure if Check Point Health Check script is checking status of backups. Maybe idea for next update

[Ofir_Shikolski]

if the GW is up for 1 year, this mean that your not patch the device to recommended patch level(=Jumbo).

We can hit an issue that already discovered and resolved, or missed imported enhancements