CP cluster sanity check

[the_rock]

Hey guys,

This super basic cluster sanity check script. I attached output from my lab on it:

[Expert@CP-FW-01:0]# dos2unix *
dos2unix: converting file check_critical_files.sh to Unix format ...
dos2unix: converting file cp_cluster_ha_report.sh to Unix format ...
dos2unix: converting file cp_cluster_sanity.sh to Unix format ...
[Expert@CP-FW-01:0]# chmod 777 *
[Expert@CP-FW-01:0]# ./cp_cluster_sanity.sh
✅ PASS. Report: /var/log/cluster_sanity_CP-FW-01_20260206_074216.txt
[Expert@CP-FW-01:0]# more /var/log/cluster_sanity_CP-FW-01_20260206_074216.txt
Check Point ClusterXL Sanity Check
Generated: Fri, 06 Feb 2026 07:42:16 -0500
Host: CP-FW-01
Mode: normal
============================================================

============================== SUMMARY ==============================
PASS: 4 WARN: 6 FAIL: 0

PASS: ClusterXL tools present and state readable.
WARN: Could not parse local cluster state from 'cphaprob state'.
PASS: Cluster interfaces appear healthy (no DOWN/PROBLEM flags detected).
PASS: Sync status does not show obvious errors.
PASS: Firewall status looks OK (fw stat shows running/installed).
WARN: Process FWD not found in cpwd_admin output (may be normal depending on version/features).
WARN: Process CPM not found in cpwd_admin output (may be normal depending on version/features).
WARN: Process HA not found in cpwd_admin output (may be normal depending on version/features).
WARN: Process CPD not found in cpwd_admin output (may be normal depending on version/features).
WARN: SecureXL/Acceleration looks disabled or has warnings (fwaccel stat).

========================== RECOMMENDED TRIAGE ========================
# Cluster health
cphaprob state
cphaprob -a if
cphaprob -a syncstat # if supported

# Firewall health
fw stat
fw ctl pstat

# CP processes
cpwd_admin list

# If you suspect sync / split issues:
# - Run the script on BOTH members and compare outputs.

Report saved to: /var/log/cluster_sanity_CP-FW-01_20260206_074216.txt
======================================================================
[Expert@CP-FW-01:0]#