- Products
- Learn
- Local User Groups
- Partners
- More
Check Point Jump-Start Online Training
Now Available on CheckMates for Beginners!
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
ZTNA Buyer’s Guide
Zero Trust essentials for your most valuable assets
The SMB Cyber Master
Boost your knowledge on Quantum Spark SMB gateways!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
Check Point just released v4.13 of it's Gaia HealthCheck Script.
Whats new:
Package | Link | Date |
healthcheck.sh script v4.13 | ![]() | 2 July 2018 |
I just have tried it on R80.20 EA, but i see two strange errors:
1.
# Misc. Messages Checks:
#########################
"Global param: operation failed: Unknown parameter" message detected:
Defined kernel parameters or their values are not valid.
For more information, refer to sk87006.
sk87006 refers to $FWDIR/boot/modules/fwkern.conf and $FWDIR/boot/modules/vpnkern.conf that both do not exist on this GW, so it could not be a kernel Parameter set wrongly; but in /var/log/messages i find details:
Jul 3 08:44:28 2018 GW_80 kernel: [fw4_0];Global param: operation failed: Unknown parameter (param name curr_expension_dev_id)
Jul 3 08:44:28 2018 GW_80 kernel: [fw4_0];Global param: operation failed: Unknown parameter (param name cphwd_expension_slot_num)
Jul 3 08:44:28 2018 GW_80 kernel: [fw4_0];Global param: operation failed: Unknown parameter (param name cphwd_curr_expension_card_type)
2.
# SecureXL Checks:
##########################
SecureXL Information:
Unable to determine accelerator status.
Please run "fwaccel stat" for further details.
So i do:
[Expert@GW_80.10:0]# fwaccel stat
+-----------------------------------------------------------------------------+
|Id|Name |Status |Interfaces |Features |
+-----------------------------------------------------------------------------+
|0 |SND |enabled |eth0,eth1 |Acceleration,Cryptography |
| | | | |Crypto: Tunnel,UDPEncap,MD5, |
| | | | |SHA1,NULL,3DES,DES,CAST, |
| | | | |CAST-40,AES-128,AES-256,ESP, |
| | | | |LinkSelection,DynamicVPN, |
| | | | |NatTraversal,AES-XCBC,SHA256 |
+-----------------------------------------------------------------------------+
Accept Templates : enabled
Drop Templates : enabled
NAT Templates : enabled
What performance says about it ? I run early versions on some very (like VERY) utilized active cluster member and script was not able to handle some of checks. Wouldnt it be benefit to add something like delay between each checks ? for example:
./script.sh 10
means each check will be performed after 10 seconds of doing nothing.
Gaia HealthCheck Script v 5.0 is out with support of R80 API calls to remotely execute a health check on a specified Gateway.
I am surprised that there is still no check for RAID status and PSU status ?!
Why there is no thread about this topic ? I am sure that Check Point users have many suggestions how to improve this briliant tool... just an idea...
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY