- Products
- Learn
- Local User Groups
- Partners
- More
AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You
Blueprint Architecture for Securing
The AI Factory & AI Data Center
Call For Papers
Your Expertise. Our Stage
Good, Better, Best:
Prioritizing Defenses Against Credential Abuse
Ink Dragon: A Major Nation-State Campaign
Watch HereCheckMates Go:
CheckMates Fest
This script generated info on general Gaia system health. Please run dos2unix and chmod 777 on the file before running it.
Example:
[Expert@CP-GW:0]# ./health.sh
Check Point Firewall Health Snapshot
Host: CP-GW
Time: Mon Jan 19 13:54:09 EST 2026
Full mode: 0
Report: /var/log/cp_fw_health_CP-GW_20260119_135409.txt
==============================================================================
## 1) System / OS Overview
==============================================================================
### Gaia uptime (clish)
-> clish -c "show uptime"
------------------------------------------------------------------------------
21 days 4 hours 49 minutes
### Gaia version (clish)
-> clish -c "show version all"
------------------------------------------------------------------------------
Product version Check Point Gaia R82
OS build 777
OS kernel version 4.18.0-372.9.1cpx86_64
OS edition 64-bit
### Current top-level load
-> bash -lc echo "loadavg: $(cat /proc/loadavg 2>/dev/null)"; vmstat 1 2 | tail -1
------------------------------------------------------------------------------
loadavg: 0.05 0.18 0.24 1/702 25830
0 0 0 3949924 2228 4727632 0 0 0 0 4018 2845 0 1 99 0 0
==============================================================================
## 2) Disk / Memory / CPU (cpstat + OS tools)
==============================================================================
### cpstat os -f perf (CPU+Mem+Disk summary)
-> cpstat os -f perf
------------------------------------------------------------------------------
Total Virtual Memory (Bytes): 24700465152
Active Virtual Memory (Bytes): 8450838528
Total Real Memory (Bytes): 16110534656
Active Real Memory (Bytes): 8450838528
Free Real Memory (Bytes): 7659696128
Memory Swaps/Sec: -
Memory To Disk Transfers/Sec: -
CPU User Time (%): 2
CPU System Time (%): 1
CPU Idle Time (%): 96
CPU Usage (%): 3
CPU Queue Length: -
CPU Interrupts/Sec: 329
CPUs Number: 16
Disk Servicing Read\Write Requests Time: -
Disk Requests Queue: -
Disk Free Space (%): 74
Disk Total Free Space (Bytes): 39883051008
Disk Available Free Space (Bytes): 39883051008
Disk Total Space (Bytes): 53676605440
### cpstat os -f multi_disk (partition usage)
-> cpstat os -f multi_disk
------------------------------------------------------------------------------
Partitions space
-----------------------------------------------------------------------------------------------------------------
|Partition|Size (bytes)|Used (bytes)|Free total (bytes)|Free total (%)|Free available (bytes)|Free available (%)|
-----------------------------------------------------------------------------------------------------------------
|/ | 53676605440| 13793554432| 39883051008| 74| 39883051008| 74|
|/boot | 296236032| 40203264| 256032768| 86| 240304128| 81|
|/var/log | 53676605440| 10177339392| 43499266048| 81| 43499266048| 81|
-----------------------------------------------------------------------------------------------------------------
### cpstat os -f ifconfig (interface counters/errors)
-> cpstat os -f ifconfig
------------------------------------------------------------------------------
Interface configuration table
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
|Name |Address |Mask |MTU |State|Mac Address |Description |IPv6 Address|IPv6 Len|RX Bytes |RX Drops|RX Errors|RX Packets|TX Bytes |TX Drops|TX Errors|TX Packets|
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
|lo | 127.0.0.1| 255.0.0.0|65536| 1| |Not supported| ::| 0| 3921038337| 0| 0| 19482677| 3921038337| 0| 0| 19482677|
|eth0 |172.16.10.249| 255.255.255.0| 1500| 1|50-01-00-06-00-00|Not supported| ::| 0|70268513263| 409| 0| 312910716|27680216268| 0| 0| 302448178|
|eth1 | 2.3.4.5|255.255.255.248| 1500| 1|50-01-00-06-00-01|Not supported| ::| 0| 1578495297| 409| 0| 6025240| 0| 0| 0| 0|
|eth2 |172.31.10.249| 255.255.255.0| 1500| 1|50-01-00-06-00-02|Not supported| ::| 0| 1578495297| 409| 0| 6025240| 0| 0| 0| 0|
|eth2.100|172.31.11.249| 255.255.255.0| 1500| 1|50-01-00-06-00-02|Not supported| ::| 0| 0| 0| 0| 0| 0| 0| 0| 0|
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
### cpstat os -f routing (routes)
-> cpstat os -f routing
------------------------------------------------------------------------------
Routing table
---------------------------------------------------
|Destination|Mask |GateWay |Interface|
---------------------------------------------------
| 0.0.0.0| 0.0.0.0|172.16.10.1|eth0 |
| 2.3.4.0|255.255.255.248| 0.0.0.0|eth1 |
|172.16.10.0| 255.255.255.0| 0.0.0.0|eth0 |
|172.31.10.0| 255.255.255.0| 0.0.0.0|eth2 |
|172.31.11.0| 255.255.255.0| 0.0.0.0|eth2.100 |
---------------------------------------------------
### cpstat os -f sensors (hardware sensors if supported)
-> cpstat os -f sensors
------------------------------------------------------------------------------
Temperature Sensors
-----------------------------
|Name|Value|Unit|Type|Status|
-----------------------------
-----------------------------
Fan Speed Sensors
-----------------------------
|Name|Value|Unit|Type|Status|
-----------------------------
-----------------------------
Voltage Sensors
-----------------------------
|Name|Value|Unit|Type|Status|
-----------------------------
-----------------------------
### Filesystem usage (df -h)
-> df -h
------------------------------------------------------------------------------
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg_splat-lv_current 50G 13G 38G 26% /
/dev/sda2 283M 39M 230M 15% /boot
/dev/mapper/vg_splat-lv_log 50G 9.5G 41G 19% /var/log
tmpfs 7.6G 30M 7.5G 1% /dev/shm
tmpfs 7.6G 0 7.6G 0% /dev/shm_huge
cgroup 7.6G 0 7.6G 0% /sys/fs/cgroup
### Memory usage (free -m)
-> free -m
------------------------------------------------------------------------------
total used free shared buff/cache available
Mem: 15364 6887 3857 41 4619 7306
Swap: 8191 0 8191
==============================================================================
## 3) Check Point Services / WatchDog
==============================================================================
### cpwd_admin list (all monitored processes)
-> cpwd_admin list
------------------------------------------------------------------------------
APP PID STAT #START START_TIME MON COMMAND
FWK_FORKER 12562 E 1 [09:05:11] 29/12/2025 N fwk_forker
FWK_WD 12571 E 1 [09:05:12] 29/12/2025 N fwk_wd -i 6 -i6 0
CPVIEWD 13131 E 1 [09:05:17] 29/12/2025 N cpviewd
CVIEWAPIS 13152 E 1 [09:05:17] 29/12/2025 N cpview_api_service
CPVIEWS 13157 E 1 [09:05:17] 29/12/2025 N cpview_services
SXL_STATD 13170 E 1 [09:05:17] 29/12/2025 N sxl_statd
MSGD 13202 E 1 [09:05:17] 29/12/2025 Y msgd
CPD 13289 E 1 [09:05:17] 29/12/2025 Y cpd
MPDAEMON 13300 E 1 [09:05:17] 29/12/2025 N mpdaemon /opt/CPshrd-R82/log/mpdaemon.elg /opt/CPshrd-R82/conf/mpdaemon.conf
TP_CONF_SERVICE 13338 E 1 [09:05:17] 29/12/2025 N tp_conf_service --conf=tp_conf.json --log=info
CI_CLEANUP 13486 E 1 [09:05:19] 29/12/2025 N avi_del_tmp_files
CIHS 13491 E 1 [09:05:19] 29/12/2025 N ci_http_server -j -f /opt/CPsuite-R82/fw1/conf/cihs.conf
FWD 13563 E 1 [09:05:19] 29/12/2025 N fwd
SPIKE_DETECTIVE 13591 E 1 [09:05:19] 29/12/2025 N spike_detective
LPD 14250 E 1 [09:05:24] 29/12/2025 N lpd
RAD 14269 E 1 [09:05:24] 29/12/2025 N rad
WSDNSD 15304 E 1 [09:06:28] 29/12/2025 Y wsdnsd
DLPU_0 15315 E 1 [09:06:28] 29/12/2025 Y dlpu -i4 0 1 -i6 -1 -1
DLPU_1 15318 E 1 [09:06:28] 29/12/2025 Y dlpu -i4 2 3 -i6 -1 -1
DLPU_2 15321 E 1 [09:06:28] 29/12/2025 Y dlpu -i4 4 5 -i6 -1 -1
TOPOD 15874 E 1 [09:06:35] 29/12/2025 Y topod
UPRD 15882 E 1 [09:06:35] 29/12/2025 Y uprd
MFDEMUXER 16022 E 1 [09:06:36] 29/12/2025 N /opt/CPcvpn-R82/bin/MoveFileDemuxer /opt/CPcvpn-R82/log/MFDemux.log /opt/CPcvpn-R82/conf/mfdemuxer.C
DBWRITER 16026 E 1 [09:06:36] 29/12/2025 N dbwriter /opt/CPcvpn-R82/log/dbwriter.elg /opt/CPcvpn-R82/conf/dbwriter.C
CVPNPROC 16034 E 1 [09:06:36] 29/12/2025 N cvpnproc /opt/CPcvpn-R82/log/cvpnproc.elg /opt/CPcvpn-R82/conf/cvpnproc.C
MFSERVER 16039 E 1 [09:06:36] 29/12/2025 N /opt/CPcvpn-R82/bin/MoveFileServer /opt/CPcvpn-R82/log/MFServer.log /opt/CPcvpn-R82/conf/mfserver.C
CVPNUMD 16043 E 1 [09:06:36] 29/12/2025 N /opt/CPcvpn-R82/bin/CvpnUMD
PINGER 16051 E 1 [09:06:36] 29/12/2025 N /opt/CPcvpn-R82/bin/Pinger /opt/CPcvpn-R82/log/Pinger.log /opt/CPcvpn-R82/conf/Pinger.C
IDLEPINGER 16054 E 1 [09:06:36] 29/12/2025 N /opt/CPcvpn-R82/bin/IdlePinger /opt/CPcvpn-R82/log/IdlePinger.log /opt/CPcvpn-R82/conf/IdlePinger.C
CVPNANALYTICS 16058 E 1 [09:06:36] 29/12/2025 N /opt/CPcvpn-R82/bin/CvpnAnalytics
CVPND 16070 E 1 [09:06:36] 29/12/2025 N cvpnd /opt/CPcvpn-R82/log/cvpnd.elg /opt/CPcvpn-R82/conf/cvpnd.C
GUACDISPATCHER 16094 E 1 [09:06:37] 29/12/2025 N /opt/CPcvpn-R82/bin/GuacDispatcher /opt/CPcvpn-R82/log/GuacDispatcher.log /opt/CPcvpn-R82/conf/GuacDispatcher.C
RTMD 23238 E 1 [09:08:52] 29/12/2025 N rtmd
DASERVICE 23313 E 1 [09:08:53] 29/12/2025 N DAService_script
AUTOUPDATER 23326 E 1 [09:08:53] 29/12/2025 N AutoUpdaterService.sh
PROBEMOND 23340 E 1 [09:08:53] 29/12/2025 N probemond
### cpwd_admin monitor_list (actively monitored processes)
-> cpwd_admin monitor_list
------------------------------------------------------------------------------
cpwd_admin:
APP FILE_NAME NO_MSG_TIMES LAST_MSG_TIME
MSGD MSGD_13202_5686.mntr 0/6 [13:53:53] 19/1/2026
CPD CPD_13289_5714.mntr 0/10 [13:53:05] 19/1/2026
WSDNSD WSDNSD_15304_12798.mntr 0/6 [13:53:56] 19/1/2026
dlpu dlpu_15321_12842.mntr 0/6 [13:53:55] 19/1/2026
dlpu dlpu_15318_12837.mntr 0/6 [13:53:56] 19/1/2026
dlpu dlpu_15315_12834.mntr 0/6 [13:53:56] 19/1/2026
vpnd vpnd_15797_13177.mntr 0/6 [13:53:19] 19/1/2026
vpnd vpnd_15799_13179.mntr 0/6 [13:53:17] 19/1/2026
vpnd vpnd_15801_13180.mntr 0/6 [13:53:44] 19/1/2026
vpnd vpnd_15803_13182.mntr 0/6 [13:53:46] 19/1/2026
TOPOD TOPOD_15874_13519.mntr 0/6 [13:53:52] 19/1/2026
UPRD UPRD_15882_13524.mntr 0/6 [13:54:02] 19/1/2026
==============================================================================
## 4) Firewall Policy / Interfaces / Performance
==============================================================================
### cpstat fw -f policy (policy name + install time)
-> cpstat fw -f policy
------------------------------------------------------------------------------
Product name: Firewall
Policy name: LAB-POLICY-Andy
Policy install time: Mon Jan 19 09:20:25 2026
Num. connections: 14
Peak num. connections: 522
Connections capacity limit: 0
Total accepted packets: 7316006
Total dropped packets: 36237
Total rejected packets: 0
Total accepted bytes: 1563545619
Total dropped bytes: 7733218
Total rejected bytes: 0
Total logged: 3453
Interface table
---------------------------------------
|Name |Dir|Accept |Drop|Reject|Log |
---------------------------------------
|eth0 |in |3392853| 9| 0| 163|
|eth0 |out|2730528| 12| 0|1926|
|eth1 |in | 596312| 0| 0| 309|
|eth1 |out| 0| 0| 0| 0|
|eth2 |in | 596312| 0| 0| 309|
|eth2 |out| 0| 0| 0| 0|
|eth2.100|in | 0| 0| 0| 0|
|eth2.100|out| 0| 0| 0| 0|
---------------------------------------
| | |7316005| 21| 0|2707|
---------------------------------------
Interface table (64-bit)
---------------------------------------
|Name |Dir|Accept |Drop|Reject|Log |
---------------------------------------
|eth0 |in |3392854| 9| 0| 163|
|eth0 |out|2730528| 12| 0|1926|
|eth1 |in | 596312| 0| 0| 309|
|eth1 |out| 0| 0| 0| 0|
|eth2 |in | 596312| 0| 0| 309|
|eth2 |out| 0| 0| 0| 0|
|eth2.100|in | 0| 0| 0| 0|
|eth2.100|out| 0| 0| 0| 0|
---------------------------------------
| | |7316006| 21| 0|2707|
---------------------------------------
### cpstat fw -f interfaces (FW interface table)
-> cpstat fw -f interfaces
------------------------------------------------------------------------------
Network interfaces
-------------------------------------------------------------------------------------------------------------------------
|Name |IP |Netmask |Flags|Peer name|Remote IP|Topology|Proxy name|Slaves|Ports|IPv6 Address|IPv6 Len|
-------------------------------------------------------------------------------------------------------------------------
|eth0 |172.16.10.249| 255.255.255.0| 0| | 0.0.0.0| 4| | | | ::| 0|
|eth1 | 2.3.4.5|255.255.255.248| 0| | 0.0.0.0| 4| | | | ::| 0|
|eth2 |172.31.10.249| 255.255.255.0| 0| | 0.0.0.0| 4| | | | ::| 0|
|eth2.100|172.31.11.249| 255.255.255.0| 0| | 0.0.0.0| 4| | | | ::| 0|
-------------------------------------------------------------------------------------------------------------------------
### cpstat fw -f perf (FW performance view)
-> cpstat fw -f perf
------------------------------------------------------------------------------
Product name: Firewall
hmem - block size: 0
hmem - requested bytes: 0
hmem - initial allocated bytes: 0
hmem - initial allocated blocks: 0
hmem - initial allocated pools: 0
hmem - current allocated bytes: 0
hmem - current allocated blocks: 0
hmem - current allocated pools: 0
hmem - maximum bytes: 0
hmem - maximum pools: 0
hmem - bytes used: 0
hmem - blocks used: 0
hmem - bytes unused: 0
hmem - blocks unused: 0
hmem - bytes peak: 0
hmem - blocks peak: 0
hmem - bytes internal use: 0
hmem - number of items: 0
hmem - alloc operations: 0
hmem - free operations: 0
hmem - failed alloc: 0
hmem - failed free: 0
kmem - system physical mem: 0
kmem - available physical mem: 0
kmem - aix heap size: 0
kmem - bytes used: 1778260279
kmem - blocking bytes used: 0
kmem - non blocking bytes used: 0
kmem - bytes unused: 0
kmem - bytes peak: 2763585687
kmem - blocking bytes peak: 0
kmem - non blocking bytes peak: 0
kmem - bytes internal use: 0
kmem - number of items: 0
kmem - alloc operations: 2351394685
kmem - free operations: 2347619952
kmem - failed alloc: 0
kmem - failed free: 0
inspect - packets: 0
inspect - operations: 0
inspect - lookups: 0
inspect - record: 0
inspect - extract: 0
cookies - total: 619090916
cookies - alloc: 0
cookies - free: 0
cookies - dup: 325052
cookies - get: 2440699065
cookies - put: 606338950
cookies - len: 1847171564
chains - alloc: 0
chains - free: 0
fragments - fragments: 0
fragments - expired: 0
fragments - packets: 0
ufp - % hits ratio: 0
ufp - total connections: 0
ufp - hits connections: 0
ufp - session max: 0
ufp - session current: 0
ufp - session count: 0
ufp - rej session : 0
ufp - time stamp:
ufp - is alive: 0
http - pid: 0
http - proto: 0
http - port: 0
http - logical port: 0
http - max avail socket: 0
http - socket in use max: 0
http - socket in use current: 0
http - socket in use count: 0
http - session max: 0
http - session current: 0
http - session count: 0
http - auth session max: 0
http - auth session current: 0
http - auth session count: 0
http - accepted session: 0
http - rejected session: 0
http - auth failures: 0
http - opsec cvp session max: 0
http - opsec cvp session current: 0
http - opsec cvp session count: 0
http - opsec cvp rej session : 0
http - ssl encryp session max: 0
http - ssl encryp session current: 0
http - ssl encryp session count: 0
http - transparent session max: 0
http - transparent session current: 0
http - transparent session count: 0
http - proxied session max: 0
http - proxied session current: 0
http - proxied session count: 0
http - tunneled session max: 0
http - tunneled session current: 0
http - tunneled session count: 0
http - ftp session max: 0
http - ftp session current: 0
http - ftp session count: 0
http - time stamp:
http - is alive: 0
ftp - pid: 0
ftp - proto: 0
ftp - port: 0
ftp - logical port: 0
ftp - max avail socket: 0
ftp - socket in use max: 0
ftp - socket in use current: 0
ftp - socket in use count: 0
ftp - session max: 0
ftp - session current: 0
ftp - session count: 0
ftp - auth session max: 0
ftp - auth session current: 0
ftp - auth session count: 0
ftp - accepted session: 0
ftp - rejected session: 0
ftp - auth failures: 0
ftp - opsec cvp session max: 0
ftp - opsec cvp session current: 0
ftp - opsec cvp session count: 0
ftp - opsec cvp rej session : 0
ftp - time stamp:
ftp - is alive: 0
telnet - pid: 0
telnet - proto: 0
telnet - port: 0
telnet - logical port: 0
telnet - max avail socket: 0
telnet - socket in use max: 0
telnet - socket in use current: 0
telnet - socket in use count: 0
telnet - session max: 0
telnet - session current: 0
telnet - session count: 0
telnet - auth session max: 0
telnet - auth session current: 0
telnet - auth session count: 0
telnet - accepted session: 0
telnet - rejected session: 0
telnet - auth failures: 0
telnet - time stamp:
telnet - is alive: 0
rlogin - pid: 0
rlogin - proto: 0
rlogin - port: 0
rlogin - logical port: 0
rlogin - max avail socket: 0
rlogin - socket in use max: 0
rlogin - socket in use current: 0
rlogin - socket in use count: 0
rlogin - session max: 0
rlogin - session current: 0
rlogin - session count: 0
rlogin - auth session max: 0
rlogin - auth session current: 0
rlogin - auth session count: 0
rlogin - accepted session: 0
rlogin - rejected session: 0
rlogin - auth failures: 0
rlogin - time stamp:
rlogin - is alive: 0
smtp - pid: 0
smtp - proto: 0
smtp - port: 0
smtp - logical port: 0
smtp - max avail socket: 0
smtp - socket in use max: 0
smtp - socket in use current: 0
smtp - socket in use count: 0
smtp - session max: 0
smtp - session current: 0
smtp - session count: 0
smtp - accepted session: 0
smtp - rejected session: 0
smtp - mail max: 0
smtp - mail curr: 0
smtp - mail count: 0
smtp - outgoing mail max: 0
smtp - outgoing mail curr: 0
smtp - outgoing mail count: 0
smtp - max mail on conn: 0
smtp - total mails : 0
smtp - time stamp: Mon Jan 19 04:20:55 2026
smtp - is alive: 0
sync - configured: No
sync - out state: Off
sync - in state: Off
sync - number of sent packets: 0
sync - number of Kbytes sent: 0
sync - number of packets received: 0
sync - number of Kbytes received: 0
sync - number of retrans requests sent: 0
sync - number of retrans requests received: 0
sync - number of ack packets sent: 0
sync - number of ack packets received: 0
sync - number of packets dropped by network: 0
sync - overall number of table updates to be synced: 9728605
sync - number of updates filtered by 'non sync': 0
### cpstat fw -f kmem (kernel memory stats via cpstat)
-> cpstat fw -f kmem
------------------------------------------------------------------------------
Product name: Firewall
kmem - system physical mem: 0
kmem - available physical mem: 0
kmem - aix heap size: 0
kmem - bytes used: 1778260279
kmem - blocking bytes used: 0
kmem - non blocking bytes used: 0
kmem - bytes unused: 0
kmem - bytes peak: 2763585687
kmem - blocking bytes peak: 0
kmem - non blocking bytes peak: 0
kmem - bytes internal use: 0
kmem - number of items: 0
kmem - alloc operations: 2351394685
kmem - free operations: 2347619952
kmem - failed alloc: 0
kmem - failed free: 0
### cpstat fw -f hmem (hash memory stats via cpstat)
-> cpstat fw -f hmem
------------------------------------------------------------------------------
Product name: Firewall
hmem - block size: 0
hmem - requested bytes: 0
hmem - initial allocated bytes: 0
hmem - initial allocated blocks: 0
hmem - initial allocated pools: 0
hmem - current allocated bytes: 0
hmem - current allocated blocks: 0
hmem - current allocated pools: 0
hmem - maximum bytes: 0
hmem - maximum pools: 0
hmem - bytes used: 0
hmem - blocks used: 0
hmem - bytes unused: 0
hmem - blocks unused: 0
hmem - bytes peak: 0
hmem - blocks peak: 0
hmem - bytes internal use: 0
hmem - number of items: 0
hmem - alloc operations: 0
hmem - free operations: 0
hmem - failed alloc: 0
hmem - failed free: 0
### fw stat (policy installation status)
-> fw stat
------------------------------------------------------------------------------
HOST POLICY DATE
localhost LAB-POLICY-Andy 19Jan2026 9:20:25 : [>eth0] [<eth0] [>eth1] [>eth2]
### fw ver (gateway version)
-> fw ver
------------------------------------------------------------------------------
This is Check Point's software version R82 - Build 013
==============================================================================
## 5) Kernel / Connections / Capacity
==============================================================================
### fw ctl pstat (capacity, connections, memory, etc.)
-> fw ctl pstat
------------------------------------------------------------------------------
Virtual System Capacity Summary:
Physical memory used: 26% (3475 MB out of 13059 MB) - below watermark
Kernel memory used: 4% (573 MB out of 13059 MB) - below watermark
Virtual memory used: 22% (2894 MB out of 13059 MB) - below watermark
Used: 2894 MB by FW, 1152 MB by zeco
Concurrent Connections: 12 (Unlimited)
Aggressive Aging is enabled, not active
Kernel memory (kmem) statistics:
Total memory bytes used: 1778191573 peak: 2763585687
Allocations: 2351395586 alloc, 0 failed alloc
2347621256 free, 0 failed free
Cookies:
619091090 total, 0 alloc, 0 free,
325052 dup, 2440699421 get, 606338954 put,
1847172083 len, 2696474906 cached len, 0 chain alloc,
0 chain free
Connections:
227593 total, 170936 TCP, 56644 UDP, 13 ICMP,
0 other, 0 anticipated, 1 recovered, 12 concurrent,
522 peak concurrent
Fragments:
0 fragments, 0 packets, 0 expired, 0 short,
0 large, 0 duplicates, 0 failures
NAT:
301096031/0 forw, 305242098/0 bckw, 606336039 tcpudp,
2090 icmp, 211593-211588 alloc
Sync: Run "cphaprob syncstat" for cluster sync statistics.
==============================================================================
## 6) SecureXL Status
==============================================================================
### fwaccel stat (SecureXL status, interfaces, features, templates)
-> fwaccel stat
------------------------------------------------------------------------------
+---------------------------------------------------------------------------------+
|Id|Name |Status |Interfaces |Features |
+---------------------------------------------------------------------------------+
|0 |KPPAK |enabled |eth0,eth1,eth2 |Acceleration,Cryptography |
| | | | | |
| | | | |Crypto: Transport,Tunnel, |
| | | | |UDPEncap,MD5,SHA1,3DES,DES, |
| | | | |AES-128,AES-256,ESP, |
| | | | |LinkSelection,GRETunnel, |
| | | | |DynamicVPN,NatTraversal, |
| | | | |AES-XCBC,SHA256,SHA384,SHA512 |
+---------------------------------------------------------------------------------+
Accept Templates : enabled
Drop Templates : enabled
NAT Templates : enabled
LightSpeed Accel : disabled
==============================================================================
## 7) ClusterXL (only if applicable)
==============================================================================
### cphaprob state (ClusterXL member states)
-> cphaprob state
------------------------------------------------------------------------------
HA module not started.
This gateway not configured as cluster
### cphaprob stat (ClusterXL status summary)
-> cphaprob stat
------------------------------------------------------------------------------
HA module not started.
This gateway not configured as cluster
### cphaprob list (pnotes/critical devices in problem state)
-> cphaprob list
------------------------------------------------------------------------------
HA module not started.
### cphaprob -a if (cluster interface monitoring view)
-> cphaprob -a if
------------------------------------------------------------------------------
HA module not started.
Warning: Sync will not function since there aren't any sync(secured) interfaces
### cphaprob syncstat (state sync transport statistics)
-> cphaprob syncstat
------------------------------------------------------------------------------
HA module not configured.
==============================================================================
## 8) Quick Heuristic Summary (best-effort)
==============================================================================
This section is a light interpretation (not authoritative).
Disk > 85% used (df):
Filesystem Size Used Avail Use% Mounted on
WatchDog processes with restarts (#START > 1):
APP PID STAT #START START_TIME MON COMMAND
End of report.
==============================================================================
Report saved to: /var/log/cp_fw_health_CP-GW_20260119_135409.txt
[Expert@CP-GW:0]#
This script generated info on general Gaia system health. Please run dos2unix and chmod 777 on the file before running it.
Example:
[Expert@CP-GW:0]# ./health.sh
Check Point Firewall Health Snapshot
Host: CP-GW
Time: Mon Jan 19 13:54:09 EST 2026
Full mode: 0
Report: /var/log/cp_fw_health_CP-GW_20260119_135409.txt
==============================================================================
## 1) System / OS Overview
=================================================================
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY