- Products
- Learn
- Local User Groups
- Partners
- More
What's New in Check Point SASE
Wednesday, 9 September @ 5pm CET / 11am EDT
The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses
AI Security Masters
Implementing the AI Security Trifecta
CheckMates Go:
Half is Not Enough
I recently noticed that when trying to turn off vpn debug off TDERROR_ALL_ALL=0 it doesn't really work (see screenshot attached).
The gateway is R80.10 and sks such as sk84561 definitely recommend the tried syntax.
Has anybody seen this before?
Thanks.
I recently noticed that when trying to turn off vpn debug off TDERROR_ALL_ALL=0 it doesn't really work (see screenshot attached).
The gateway is R80.10 and sks such as sk84561 definitely recommend the tried syntax.
Has anybody seen this before?
Thanks.
So would I be right to assume that vpn debug off TDERROR_ALL_ALL=0 is "discontinued" and that vpn debug off is to be used? sk89940 also refers to vpn debug off TDERROR_ALL_ALL=0 so unless my syntax is wrong or I'm missing a hotfix the documentation should be updated?
So would I be right to assume that vpn debug off TDERROR_ALL_ALL=0 is "discontinued" and that vpn debug off is to be used? sk89940 also refers to vpn debug off TDERROR_ALL_ALL=0 so unless my syntax is wrong or I'm missing a hotfix the documentation should be updated?
Anytime you invoke a debug command like this with TDERROR_ALL_ALL=5, you should always include TDERROR_ALL_ALL=0 when you turn it back off. Failure to do so seems to still leave some extra debugging enabled, have noticed this effect with fwm in particular.
Anytime you invoke a debug command like this with TDERROR_ALL_ALL=5, you should always include TDERROR_ALL_ALL=0 when you turn it back off. Failure to do so seems to still leave some extra debugging enabled, have noticed this effect with fwm in particular.
That's what I thought but it obviously didn't work for me so I was wondering whether I was doing something wrong or whether the said way of turning vpn debugging off is discontinued.
That's what I thought but it obviously didn't work for me so I was wondering whether I was doing something wrong or whether the said way of turning vpn debugging off is discontinued.
In your original post you said you were using "vpn debug off TDERROR_ALL_ALL=5" which is incorrect. The SK you reference uses "vpn debug off TDERROR_ALL_ALL=0" which is correct. Even after running this latter command, there will still be some slight debugging dumped into $FWDIR/log/vpnd.elg by default, even if debug has been properly disabled.
In your original post you said you were using "vpn debug off TDERROR_ALL_ALL=5" which is incorrect. The SK you reference uses "vpn debug off TDERROR_ALL_ALL=0" which is correct. Even after running this latter command, there will still be some slight debugging dumped into $FWDIR/log/vpnd.elg by default, even if debug has been properly disabled.
I think I mistyped the original question which I will rectify now but if you look at the screenshot attached you can see what I mean.
I think I mistyped the original question which I will rectify now but if you look at the screenshot attached you can see what I mean.