- Products
- Learn
- Local User Groups
- Partners
- More
Firewall Uptime, Reimagined
How AIOps Simplifies Operations and Prevents Outages
Introduction to Lakera:
Securing the AI Frontier!
Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
HTTPS Inspection
Help us to understand your needs better
CheckMates Go:
SharePoint CVEs and More!
So interestingly there appears to be some extra not-yet-published leading edge tests that can be added on to the standard hcp command with the --tac option once hcp has been updated to the latest version:
sk183223: HealthCheck Point Addon
I always found it interesting to informally track what new tests are added to hcp with each new update as these tend to be driven by what current cases TAC is seeing, and in some cases has tipped me off to an issue even before an SK article was created or a Checkmates post appeared. So let's take a look at these leading-edge TAC tests that aren't run by default!
EDIT: There is no need to download a new copy of hcp with curl_cli as shown in this screenshot, please see my follow-up post below.
EDIT: There is no need to download a new copy of hcp with curl_cli as shown in this screenshot, please see my follow-up post below.
Some definitely juicy ones here:
The cool part is if you aren't sure exactly what a certain hcp test means (even if it is a TAC test), you can always go look at the python source code for the test itself and see precisely what it is looking for here: /etc/hcp/tests/*/*.py
I quite like how much data HCP can collect.
I cant seem to find that sk, either by opening the link or searching for it.
Andy
Odd, it was there Saturday but now I can't see it either. There wasn't much in that SK other than the command I used in the screenshot to update hcp, and a mention of the --tac option.
No worries! Yes, I ran the command you gave in your screenshot in one of my R82 lab fws and worked great.
Andy
So after some more investigation performed while updating my Gateway Performance Optimization Course, it looks like takes 76 and higher of hcp have the TAC tests capability built-in, and there is no need to download a different version of hcp as shown in my original posting's screenshot. Here is the new page from my course for future reference:
Thanks for that Tim!
Oh wow! This is nice! An extra 100 oddball tests available!
hcp -l --tac |awk -F "|" ' $3 ~ /TAC/ { print $0 }' |wc -l
100
Nice find! 🙂
good find!
Yep just remember these TAC tests are not supported (don't bug TAC if you see a failure of one of these) and can change at any time!
I ran it on few fws and no issues.
Andy
Note that the SK is currently internal and may be made available to a wider audience in the future. No ETA currently.
Yes, but it was briefly exposed. These types of posts are the result of my weekly review of all SKs, which helps keep my Gateway Performance Optimization Course fully up to date. 🙂
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
15 | |
12 | |
8 | |
6 | |
6 | |
6 | |
5 | |
5 | |
4 | |
3 |
Tue 07 Oct 2025 @ 10:00 AM (CEST)
Cloud Architect Series: AI-Powered API Security with CloudGuard WAFThu 09 Oct 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!Thu 09 Oct 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!Wed 22 Oct 2025 @ 11:00 AM (EDT)
Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents OutagesAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY