Quick status output on the firewall

[the_rock]

Hey guys,

Below is copy/paste command you can run from expert mode that would produce some basic outputs as far as policy, if stats, logging.

Command:

from expert:

bash -lc '

echo "===== CHECK POINT QUICK STATUS ====="

echo "Host: $(hostname)    Date: $(date)"

echo

echo "== Version =="

fw ver

echo

echo "== Enabled blades (confirms IPS blade etc.) =="

cpstat blades

echo

echo "== Installed Policy (name + last install time + interfaces) =="

cpstat -f policy fw

echo

echo "== IPS statistics =="

cpstat -f statistics ips

echo

echo "== Management/Log servers configured (masters file) =="

echo "$FWDIR/conf/masters:"

cat "$FWDIR/conf/masters" 2>/dev/null || echo "  (cannot read masters file)"

echo

echo "== Log/Management connectivity (log server connection stats) =="

cpstat -f log_connection fw

echo

echo "== Check Point processes (are key daemons up?) =="

cpwd_admin list

echo

echo "== OS connectivity summary (if supported on your version) =="

cpstat -f connectivity os 2>/dev/null || echo "  (connectivity flavor not available)"

echo "===== END ====="

'

Lab output:

===== CHECK POINT QUICK STATUS =====
Host: CP-GW Date: Wed Feb 11 07:35:43 EST 2026

== Version ==
This is Check Point's software version R82 - Build 013

== Enabled blades (confirms IPS blade etc.) ==

Packets accepted : 23490796
Packets dropped : 3248704
Peak number of connections: 549
Number of connections: 11

Top Rule Hits
-----------------------
|rule index|rule count|
-----------------------
-----------------------

== Installed Policy (name + last install time + interfaces) ==

Product name: Firewall
Policy name: LAB-POLICY-Andy
Policy install time: Tue Feb 10 12:07:50 2026
Num. connections: 11
Peak num. connections: 549
Connections capacity limit: 0
Total accepted packets: 23490796
Total dropped packets: 3248704
Total rejected packets: 0
Total accepted bytes: 3416960943
Total dropped bytes: 186946174
Total rejected bytes: 0
Total logged: 13148

Interface table
-----------------------------------------
|Name |Dir|Accept |Drop|Reject|Log |
-----------------------------------------
|eth0 |in |11859462| 0| 0| 525|
|eth0 |out|11594900| 32| 0| 8169|
|eth1 |in | 18217| 0| 0| 729|
|eth1 |out| 0| 0| 0| 0|
|eth2 |in | 18217| 0| 0| 729|
|eth2 |out| 0| 0| 0| 0|
|eth2.100|in | 0| 0| 0| 0|
|eth2.100|out| 0| 0| 0| 0|
-----------------------------------------
| | |23490796| 32| 0|10152|
-----------------------------------------

Interface table (64-bit)
-----------------------------------------
|Name |Dir|Accept |Drop|Reject|Log |
-----------------------------------------
|eth0 |in |11859462| 0| 0| 525|
|eth0 |out|11594900| 32| 0| 8169|
|eth1 |in | 18217| 0| 0| 729|
|eth1 |out| 0| 0| 0| 0|
|eth2 |in | 18217| 0| 0| 729|
|eth2 |out| 0| 0| 0| 0|
|eth2.100|in | 0| 0| 0| 0|
|eth2.100|out| 0| 0| 0| 0|
-----------------------------------------
| | |23490796| 32| 0|10152|
-----------------------------------------

== IPS statistics ==
No product has flag 'ips'

== Management/Log servers configured (masters file) ==
/opt/CPsuite-R82/fw1/conf/masters:
[Policy]
CP-MANAGEMENT
[Log]
CP-MANAGEMENT
[Alert]
CP-MANAGEMENT

== Log/Management connectivity (log server connection stats) ==

Overall Status: 0
Overall Status Description: Security Gateway is reporting logs as defined
Local Logging Mode Description: Logs are written to log server
Local Logging Mode Status: 0
Local Logging Sending Rate: 0
Log Handling Rate: 0

Log Servers Connections
--------------------------------------------------------
|IP |Status|Status Description |Sending Rate|
--------------------------------------------------------
|172.16.10.252| 0|Log-Server Connected| 0|
--------------------------------------------------------

== Check Point processes (are key daemons up?) ==
APP PID STAT #START START_TIME MON COMMAND
FWK_FORKER 11464 E 1 [16:38:18] 23/1/2026 N fwk_forker
FWK_WD 11473 E 1 [16:38:18] 23/1/2026 N fwk_wd -i 6 -i6 0
CPVIEWD 12032 E 1 [16:38:22] 23/1/2026 N cpviewd
CVIEWAPIS 12053 E 1 [16:38:22] 23/1/2026 N cpview_api_service
CPVIEWS 12058 E 1 [16:38:22] 23/1/2026 N cpview_services
SXL_STATD 12066 E 1 [16:38:22] 23/1/2026 N sxl_statd
MSGD 12095 E 1 [16:38:22] 23/1/2026 Y msgd
CPD 12188 E 1 [16:38:22] 23/1/2026 Y cpd
MPDAEMON 12199 E 1 [16:38:22] 23/1/2026 N mpdaemon /opt/CPshrd-R82/log/mpdaemon.elg /opt/CPshrd-R82/conf/mpdaemon.conf
TP_CONF_SERVICE 12236 E 1 [16:38:23] 23/1/2026 N tp_conf_service --conf=tp_conf.json --log=info
CI_CLEANUP 12387 E 1 [16:38:24] 23/1/2026 N avi_del_tmp_files
CIHS 12392 E 1 [16:38:24] 23/1/2026 N ci_http_server -j -f /opt/CPsuite-R82/fw1/conf/cihs.conf
FWD 12461 E 1 [16:38:24] 23/1/2026 N fwd
SPIKE_DETECTIVE 12491 E 1 [16:38:24] 23/1/2026 N spike_detective
LPD 32350 E 1 [01:02:26] 10/2/2026 N lpd
RAD 13183 E 1 [16:38:30] 23/1/2026 N rad
WSDNSD 14141 E 1 [16:39:30] 23/1/2026 Y wsdnsd
DLPU_0 14152 E 1 [16:39:30] 23/1/2026 Y dlpu -i4 0 1 -i6 -1 -1
DLPU_1 14155 E 1 [16:39:30] 23/1/2026 Y dlpu -i4 2 3 -i6 -1 -1
DLPU_2 14158 E 1 [16:39:30] 23/1/2026 Y dlpu -i4 4 5 -i6 -1 -1
TOPOD 14783 E 1 [16:39:37] 23/1/2026 Y topod
UPRD 14788 E 1 [16:39:37] 23/1/2026 Y uprd
MFDEMUXER 14933 E 1 [16:39:38] 23/1/2026 N /opt/CPcvpn-R82/bin/MoveFileDemuxer /opt/CPcvpn-R82/log/MFDemux.log /opt/CPcvpn-R82/conf/mfdemuxer.C
DBWRITER 14941 E 1 [16:39:38] 23/1/2026 N dbwriter /opt/CPcvpn-R82/log/dbwriter.elg /opt/CPcvpn-R82/conf/dbwriter.C
CVPNPROC 14946 E 1 [16:39:38] 23/1/2026 N cvpnproc /opt/CPcvpn-R82/log/cvpnproc.elg /opt/CPcvpn-R82/conf/cvpnproc.C
MFSERVER 14953 E 1 [16:39:38] 23/1/2026 N /opt/CPcvpn-R82/bin/MoveFileServer /opt/CPcvpn-R82/log/MFServer.log /opt/CPcvpn-R82/conf/mfserver.C
CVPNUMD 14956 E 1 [16:39:38] 23/1/2026 N /opt/CPcvpn-R82/bin/CvpnUMD
PINGER 14959 E 1 [16:39:38] 23/1/2026 N /opt/CPcvpn-R82/bin/Pinger /opt/CPcvpn-R82/log/Pinger.log /opt/CPcvpn-R82/conf/Pinger.C
IDLEPINGER 14962 E 1 [16:39:38] 23/1/2026 N /opt/CPcvpn-R82/bin/IdlePinger /opt/CPcvpn-R82/log/IdlePinger.log /opt/CPcvpn-R82/conf/IdlePinger.C
CVPNANALYTICS 14966 E 1 [16:39:38] 23/1/2026 N /opt/CPcvpn-R82/bin/CvpnAnalytics
CVPND 14978 E 1 [16:39:38] 23/1/2026 N cvpnd /opt/CPcvpn-R82/log/cvpnd.elg /opt/CPcvpn-R82/conf/cvpnd.C
GUACDISPATCHER 15006 E 1 [16:39:39] 23/1/2026 N /opt/CPcvpn-R82/bin/GuacDispatcher /opt/CPcvpn-R82/log/GuacDispatcher.log /opt/CPcvpn-R82/conf/GuacDispatcher.C
RTMD 19736 E 1 [16:40:57] 23/1/2026 N rtmd
DASERVICE 19808 E 1 [16:40:58] 23/1/2026 N DAService_script
AUTOUPDATER 19822 E 1 [16:40:58] 23/1/2026 N AutoUpdaterService.sh
PROBEMOND 19836 E 1 [16:40:58] 23/1/2026 N probemond

== OS connectivity summary (if supported on your version) ==

Connectivity to User Center: -

===== END =====