HealthCheck Point (HCP) - SmartConsole Extension

[Danny]

Official Check Point HealthCheck Point (HCP) SmartConsole Extension

Installation instructions: sk171436

Prerequisites:

1. Make sure the HCP package is installed on your Security Management Server
2. Run the "hcp -r all" command at least once on each Security Gateway you want to see the report from.

Activating Extension on Security Management

Connect to your Security Management Server via SSH and run:

1. # service hcp_ext start
   
   
2. # hcp --ext-update-reports all
   • You must run this command on every restart of the Security Management Server to collect a report from the newly created  Security Gateway.

Adding Extension in SmartConsole

1. Go to Manage & Settings -> Preference -> SmartConsole Extensions -> click "+":
2. Enter the following as URL:  
   https://<your-management-ip>/ngm-management-app/hcp/extension.json

[George_Ellis]

FYI - As of R81,10 with Jumbo Take 95, this is now built into the system.  Use https://<deviceip>/hcp  .

[the_rock]

I prefer web one so much better, as whenever I used to do hcp -r all command, html would never work right. Web one is super user friendly...btw, included since the beginning in R81.20

Andy

[the_rock]

Another awesome extension @Danny 

[the_rock]

Had some issues in R81.10 lab, but extension worked fine on R81.20...will try different R81.10 lab I have and report back.

Andy

[Parabol]

Hi Danny,

I can view the HCP reports when going https://<deviceip>/hcp  as @George_Ellis mentioned below. I'm having problems setting up the smartconsole extension though, I followed the steps:

[Expert@mgmtServer]# service hcp_ext start
Running hcp_ext: [Expert@mgmtServer]#

[Expert@mgmtServer]# hcp --ext-update-reports all

Shutting hcp_ext: Running hcp_ext: Shutting hcp_ext: Running hcp_ext: Traceback (most recent call last):
File "/bin/hcp", line 909, in <module>
sys.exit(main())
File "/bin/hcp", line 821, in main
hcp_ext_update_reports_handler(args.ext_update_reports, domain=args.domain)
File "/bin/hcp", line 765, in hcp_ext_update_reports_handler
hcp_ext.update_hcp_result(machine_id, live_update)
File "/etc/hcp/source/hcp/utils/hcp_extension/hcp_extension.py", line 273, in update_hcp_result
self.get_gateway_topology()
File "/etc/hcp/source/hcp/utils/hcp_extension/hcp_extension.py", line 214, in get_gateway_topology
self._build_machines_uids()
File "/etc/hcp/source/hcp/utils/hcp_extension/hcp_extension.py", line 223, in _build_machines_uids
copyfile('{}/{}'.format(PERMANENT_REPORT_PATH, 'machines.js'), '{}/{}'.format(EXT_REPORTS_PATH, 'machines.js'))
File "/opt/CPsuite-R81.20/fw1/Python/lib/python3.7/shutil.py", line 121, in copyfile
with open(dst, 'wb') as fdst:
FileNotFoundError: [Errno 2] No such file or directory: '/opt/CPsuite-R81.20/fw1/cpextensions/tmp/jetty-127.0.0.1-8086-n gm-management-app.war-_ngm-management-app-any-/webapp/hcp/results//machines.js'

It seems like it's trying to fetch the file but the file/directory doesn't exist. For reference as you can see we're on R81.20.

I appreciate any advice you might be able to offer.

Thanks!

[PankajTiwari1]

Hi, when I run health check on smart console we are getting this error. you can see in image below.

How do I resolve this?

[Jacek2]

Hello, when I trying to add extension I got "Forbidden" message appears. Are you able to help.

[Danny]

Please open a SR with TAC to get help.