Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 

RAS VPN Statistics

Danny
Champion Champion
Champion

COVID-19  💊 We take care of your Remote Access VPN needs!
ℹ️ Supported from R80.30+

SmartConsole Extension to show a summary about the remote access statistics of a VPN gateway.
Extension URL: https://dannyjung.de/vpnstat.json

Uses the One-liner developed in this thread.

VSX gateways aren't supported yet (need to implement loading of VS environment and changing to VS)

Thanks to  @PhoneBoy for license macro information in this thread. [ VPN License Guide ]
Thanks

...;
TO ACCESS CHECKMATES TOOLBOX it's simple and free

Disclaimer: Check Point does not provide maintenance services or technical or customer support for third party content provided on this Site, including in CheckMates Toolbox. See also our Third Party Software Disclaimer.




42 Replies

PhoneBoy
Admin
Admin
Nice work! ;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

CheckPoint, I really really hope you understand how much am I frustrated of not being able to use this marvelous extension on my centrally managed SMBs!!!

I want this escalated right away and product manager to contact me with an explanation why so! And please skip "this is not on product roadmap" mumbo-jumbo... 😆

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


Wolfgang
Authority
Authority

nice 

Wolfgang_0-1586694227893.gif

 

 

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


MartinTzvetanov
Advisor
Hello,

Cool tool but it works only in my lab with R80.40 :-).

I sent it to three of our customers:
1. R80.30 - after clicking on show statistics only a bracket is shown "(". Running the script manually on SSH it shows correct info.
2. R80.20 - impossible to add the json - it says The manifest is not valid.
3. R80.30 - no feedback yet.

Does it depends on the SmartConsole version or CheckPoint version or anything else? Any additional setting that must be turned on/off t...;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

Hi  @MartinTzvetanov ,

thanks for your feedback on my SmartConsole Extension (SMX).

  1. This happens when the customer doesn't confirm the user dialog after clicking the button. I'm still waiting on Check Points SMX team for advice how to handle these case in order to show a better result.
  2. These SmartConsole Extensions are supported from R80.30+.

You can turn on debugs in SmartConsole just above the SMX import section.

image.png

 

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

MartinTzvetanov
Advisor
Hi @Danny,

1. Click Show statistics -> Confirm the job and then nothing. I expect the second confirmation but it doesn't happen.

2. Make sense 🙂 ;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

Are you using the latest SmartConsole R80.30 (Build 62)? After confirming the task the SmartConsole should run it and show it's progress in the taskbar.

image.png

If no task is started on your side, you'll need to open a SR with Check Point support.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

MartinTzvetanov
Advisor
No task is started after the confirmation. I though that the problem might be with an old version of the SmartConsole but didn't have enough time to check it. I'll do it and update here ;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

MartinTzvetanov
Advisor

I did few tests and here are the results:

Updated to the latest SmartConsole - still no task is started. I played with the script and run it from the SmartConsole Script option and it said Not a VPN gateway. The one-liner script runs smoothly. The GWs are 6500, something related to the image that is installed?

However, I created a script in the script repository and it does the job.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Eduardo_Pereira
Employee Alumnus
Employee Alumnus

Hi  @Danny 

Thanks for that again!

Just a quick feedback on Gateways running IaaS flavors, it is showing as "Not a VPN Gateway" 

I run my personal lab on Azure and I´m getting that message.

 

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

Hi  @Eduardo_Pereira ,

please have a look at the originating One-liner and how it is identifying VPN gateways. Please advice how to adopt it to your Azure Gateway.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


Eduardo_Pereira
Employee Alumnus
Employee Alumnus

Untitled.png

 

As tested earlier, the one-liner works!

Hehe, I´m not quite sure why the script in SmartConsole had a different output.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Eduardo_Pereira
Employee Alumnus
Employee Alumnus

I'm not quite sure if you changed something on the code, but now it works!!

Tiny typo on the LICENSES table.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

MattGB7
Participant

Hi  @Danny , Great one liner and the extension looks amazing. When testing with SmartConsole 993000062 this causes the console to crash. The extension has been added, when I click "Show Statistics" and then aprove the changes by clicking "OK"  I get "SmartConsole has experieanced a serious problem and needs to re-launch"

 

2020-04-16 13_25_40-Delboy - SmartConsole.png

Any ideas? 

Matt

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

KS
Contributor

Hello

I have similar problems. Oneliner works fine on the GW when run as a script, but installed as a console extension causes it to crash or not providing any output - "Processing"

Testes on r80.30 JHF 155, SC xxx20 and xxx62 both had the same issue.

 

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

Did you already write to extensions@checkpoint.com ? Please send them the debug files described by  @Tomer_Sole in this post.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

KS
Contributor

Hello again

 

Funny thing .... 

Tested it again, installed extenstion on SC xxx62 and this time it works flawless.

Nothing has changed in last 3 hours, looks like removing and installing extension back somehow did  the trick. Strange.

In this case there is no point for me to do a debug 😉

 

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

Thanks for your reponse. It seems that SmartConsole has some stability issues with extensions. Also when you activate more than one extension at the same time and switch between the extension then SmartConsole has issues to run the correct extension. So please report any issues to Check Point so we can hopefully get better extension functionality in future SmartConsole builds.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Matthias_Kring
Contributor

The extension is installed properly, but after starting, I only get "ESC to cancel" message. Nothing els happens.

The one-liner script runs fine.

However, I noticed several Administrator login failures with unknown reason coming from the same PC where Smartvonsole is running. Do I need to set som credentials ?

(Console 80.30  993000062)

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

Did you already write to extensions@checkpoint.com ? Please send them the debug files described by @Tomer_Sole in this post.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Matthias_Kring
Contributor

the files described by Tomer Sole don't exist. I just re-installed and tried again. As soon, as I start the extension, I get Administrator logon failures. So, no files will be written.

Well, at least, I've sent him the cpm*elg* files.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Baasanjargal_Ts
Advisor
Advisor

Hello.

 

I tried it. SmartCenter name not found error happens. img006.png

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


Danny
Champion Champion
Champion

@Baasanjargal_Ts : Please write to extensions@checkpoint.com and ask for support. It is their routine to read out the SmartCenter name.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Baasanjargal_Ts
Advisor
Advisor
Got it. Thanks. ;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Chris_Newman
Participant
Interested in what you hear back. Thank you. ;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Baasanjargal_Ts
Advisor
Advisor

I sent email. But they redirecting to owners of extensions.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

Danny
Champion Champion
Champion

Users of Check Points MaaS solution, don't have a SmartCenter (firewall management) object within the 'Gateways and Servers' view in your web-based SmartConsole. I improved the extension to send the script commands directly on the selected gateway if no SmartCenter object is available. Alternatively you can also import this one-liner it into the scripts repository of your web-based SmartConsole to run it from there.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


Baasanjargal_Ts
Advisor
Advisor
It works now.
Thanks Danny. ;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

ReneN
Explorer

this Extension works realy good. nice work

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free