Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Pearl

SmartConsole Extension - Remote Access VPN Statistics

Jump to solution

COVID-19 💊 We take care of your Remote Access VPN needs!
ℹ️ Supported from R80.30+

SmartConsole Extension to show a summary about the remote access statistics of a VPN gateway.
Extension URL: https://dannyjung.de/vpnstat.json

import.png
vpnstat.png

Uses the One-liner developed in this thread.

VSX gateways aren't supported yet (need to implement loading of VS environment and changing to VS)

Thanks to @PhoneBoy for license macro information in this thread. [ VPN License Guide ]
Thanks to @HristoGrigorov for SMB support and testing.
Thanks to @Eugene_Grybinny for describing the task-id, show-task process.
Thanks to CheckMates for these Remote Access SmartEvent Reports: Basic, Enhanced, Application Monitoring, Custom User Stats

-- More SmartConsole Extensions --

Gaia Health Check
Interface Summary
Advanced system summary
Check Point Services Check
Show VPN topology on gateways
Show interface topology on gateways

1 Solution

Accepted Solutions
Highlighted
Pearl

Users of Check Points MaaS solution, don't have a SmartCenter (firewall management) object within the 'Gateways and Servers' view in your web-based SmartConsole. I improved the extension to send the script commands directly on the selected gateway if no SmartCenter object is available. Alternatively you can also import this one-liner it into the scripts repository of your web-based SmartConsole to run it from there.

View solution in original post

34 Replies
Highlighted
Admin
Admin
Nice work!
0 Kudos
Highlighted

CheckPoint, I really really hope you understand how much am I frustrated of not being able to use this marvelous extension on my centrally managed SMBs!!!

I want this escalated right away and product manager to contact me with an explanation why so! And please skip "this is not on product roadmap" mumbo-jumbo... 😆

Highlighted
Gold

nice 

Wolfgang_0-1586694227893.gif

 

 

Highlighted
Hello,

Cool tool but it works only in my lab with R80.40 :-).

I sent it to three of our customers:
1. R80.30 - after clicking on show statistics only a bracket is shown "(". Running the script manually on SSH it shows correct info.
2. R80.20 - impossible to add the json - it says The manifest is not valid.
3. R80.30 - no feedback yet.

Does it depends on the SmartConsole version or CheckPoint version or anything else? Any additional setting that must be turned on/off to make it work? Any file for debug info?
KR
0 Kudos
Highlighted
Pearl

Hi @MartinTzvetanov ,

thanks for your feedback on my SmartConsole Extension (SMX).

  1. This happens when the customer doesn't confirm the user dialog after clicking the button. I'm still waiting on Check Points SMX team for advice how to handle these case in order to show a better result.
  2. These SmartConsole Extensions are supported from R80.30+.

You can turn on debugs in SmartConsole just above the SMX import section.

image.png

 

0 Kudos
Highlighted
Hi @Danny,

1. Click Show statistics -> Confirm the job and then nothing. I expect the second confirmation but it doesn't happen.

2. Make sense 🙂
0 Kudos
Highlighted
Pearl

Are you using the latest SmartConsole R80.30 (Build 62)? After confirming the task the SmartConsole should run it and show it's progress in the taskbar.

image.png

If no task is started on your side, you'll need to open a SR with Check Point support.

0 Kudos
Highlighted
No task is started after the confirmation. I though that the problem might be with an old version of the SmartConsole but didn't have enough time to check it. I'll do it and update here
0 Kudos
Highlighted

I did few tests and here are the results:

Updated to the latest SmartConsole - still no task is started. I played with the script and run it from the SmartConsole Script option and it said Not a VPN gateway. The one-liner script runs smoothly. The GWs are 6500, something related to the image that is installed?

However, I created a script in the script repository and it does the job.

0 Kudos
Highlighted
Employee+
Employee+

Hi @Danny 

Thanks for that again!

Just a quick feedback on Gateways running IaaS flavors, it is showing as "Not a VPN Gateway" 

I run my personal lab on Azure and I´m getting that message.

 

0 Kudos
Highlighted
Pearl

Hi @Eduardo_Pereira ,

please have a look at the originating One-liner and how it is identifying VPN gateways. Please advice how to adopt it to your Azure Gateway.

Highlighted
Employee+
Employee+

Untitled.png

 

As tested earlier, the one-liner works!

Hehe, I´m not quite sure why the script in SmartConsole had a different output.

0 Kudos
Highlighted
Employee+
Employee+

I'm not quite sure if you changed something on the code, but now it works!!

Tiny typo on the LICENSES table.

0 Kudos
Highlighted
Iron

Hi @Danny , Great one liner and the extension looks amazing. When testing with SmartConsole 993000062 this causes the console to crash. The extension has been added, when I click "Show Statistics" and then aprove the changes by clicking "OK"  I get "SmartConsole has experieanced a serious problem and needs to re-launch"

 

2020-04-16 13_25_40-Delboy - SmartConsole.png

Any ideas? 

Matt

0 Kudos
Highlighted
Iron

Hello

I have similar problems. Oneliner works fine on the GW when run as a script, but installed as a console extension causes it to crash or not providing any output - "Processing"

Testes on r80.30 JHF 155, SC xxx20 and xxx62 both had the same issue.

 

0 Kudos
Highlighted
Pearl

Did you already write to extensions@checkpoint.com ? Please send them the debug files described by @Tomer_Sole in this post.

0 Kudos
Highlighted
Iron

Hello again

 

Funny thing .... 

Tested it again, installed extenstion on SC xxx62 and this time it works flawless.

Nothing has changed in last 3 hours, looks like removing and installing extension back somehow did  the trick. Strange.

In this case there is no point for me to do a debug 😉

 

0 Kudos
Highlighted
Pearl

Thanks for your reponse. It seems that SmartConsole has some stability issues with extensions. Also when you activate more than one extension at the same time and switch between the extension then SmartConsole has issues to run the correct extension. So please report any issues to Check Point so we can hopefully get better extension functionality in future SmartConsole builds.

0 Kudos
Highlighted

The extension is installed properly, but after starting, I only get "ESC to cancel" message. Nothing els happens.

The one-liner script runs fine.

However, I noticed several Administrator login failures with unknown reason coming from the same PC where Smartvonsole is running. Do I need to set som credentials ?

(Console 80.30  993000062)

0 Kudos
Highlighted
Pearl

Did you already write to extensions@checkpoint.com ? Please send them the debug files described by @Tomer_Sole in this post.

0 Kudos
Highlighted

the files described by Tomer Sole don't exist. I just re-installed and tried again. As soon, as I start the extension, I get Administrator logon failures. So, no files will be written.

Well, at least, I've sent him the cpm*elg* files.

0 Kudos
Highlighted

Hello.

 

I tried it. SmartCenter name not found error happens.img006.png

Highlighted
Pearl

@Baasanjargal_Ts : Please write to extensions@checkpoint.com and ask for support. It is their routine to read out the SmartCenter name.

0 Kudos
Highlighted
Got it. Thanks.
0 Kudos
Highlighted
Interested in what you hear back. Thank you.
0 Kudos
Highlighted

I sent email. But they redirecting to owners of extensions.

0 Kudos
Highlighted
Pearl

Users of Check Points MaaS solution, don't have a SmartCenter (firewall management) object within the 'Gateways and Servers' view in your web-based SmartConsole. I improved the extension to send the script commands directly on the selected gateway if no SmartCenter object is available. Alternatively you can also import this one-liner it into the scripts repository of your web-based SmartConsole to run it from there.

View solution in original post

Highlighted
It works now.
Thanks Danny.
0 Kudos
Highlighted
Ivory

this Extension works realy good. nice work