Checkpoint tool to check if a destination host exists or a port is open?

[Jin_Zhou]

In firewall log analysis, we see a lot entries with small number of hit count, 1 over three months for example. I believe in most cases it is the client for whatever reason just decides to go to that host on a port but the host may not exist or the service is not open on it so the communication is never established.  I wonder if Checkpoint has a tool to find if the destination actually exists or the port is open. Thanks.

[Benedikt_Weissl]

Enable accounting, then have a look at the log. You should see the number of exchanged packets.

[PhoneBoy]

Nothing integrated into SmartConsole that I’m aware of but you could easily check this yourself with telnet, netcat, or a variety of other tools.

[Maarten_Sjouw]

Or you can use Pinj, that will allow you to check from another source IP.