- Products
- Learn
- Local User Groups
- Partners
- More
Quantum Spark Management Unleashed!
Introducing Check Point Quantum Spark 2500:
Smarter Security, Faster Connectivity, and Simpler MSP Management!
Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
HTTPS Inspection
Help us to understand your needs better
CheckMates Go:
SharePoint CVEs and More!
Slides attached below, Q&A is below.
Please post a comment on the post before 31 August 2021 to be entered in a drawing for an Amazon Gift Card!
It is supported on any (virtual) appliance that runs regular Gaia, including VSX and Maestro. VSX is supported from R80.10 and you can get historical data starting with R80.40.
Unfortunately no plans currently exist to integrate it in the near future, however it is planned.
Not currently, though perhaps as part of a planned REST API it will be possible. Some of the data can be obtained via SNMP.
Currently, the existing solution is to use DiagnosticsView to visualize the data, which requires taking a cpinfo from the relevant gateway. You can also use the community-provided CPviewer solution. The CPview database is a SQLite database, which can be visualized with a number of third party tools.
We now have historical data saved on the device, which can be exported as a SQLite 3 database. Please use that instead.
Not all statistics are collected in VSX mode as there may be a performance impact in doing so. It is recommended only to activate statistics (e.g. in Advanced > VSX > VSs) when troubleshooting a specific issue.
R80.20 and above have a different SecureXL implementation, which impacted the availability of this feature until it was added to recent JHF releases. Also, this feature requires specific steps to enable. Refer to sk167903 for details. We do plan to simplify this in the future.
1 month
Not currently. If there is something you'd like to see via SNMP, let us know!
We will consider the suggestion, right now you can only navigate on CPView using mouse or keyboard.
cpview -t
Most of the features/functionality are relevant for all R8x versions. Some features require being on a specific version/JHF as noted.
Only SMO for now.
Not at the moment, but this is planned for future releases.
There are 2 measurements: packets per second (average of amount of packets per second) and megabytes / bits per second.
RX / TX only shows received / sent data (not counting packet headers, etc) while the general throughput is for all the overall traffic.
Not all data available in realtime is collected in a historical fashion. We do plan to offer the ability to collect additional data in the future.
This is on the roadmap.
No, and it would require a fairly significant amount of storage to do this on a busy gateway. However, you can query the connections table via the CLI using: fw tab -t connections -u
Not currently.
The API is still on development so it is still early to answer this question, however the information source should be the same, the format and UX will be of course completely different.
Yes, it will keep the data flow open and may cause performance hiccups.
Not planned currently.
They have some common ground but CPView has a more in depth data compared to the monitoring data, which is more summarized.
There are multiple paths, the file is easily searchable using a 'find' command - CPViewDB.dat or cpview_services.dat. You can also easily get an export of the current database via the command cpview -s export.
Planned for R81.20
Generally, yes.
Is it possible to save samples to the CPView history more frequently than once a minute? At least when a troubleshooting in a gateway is in progress. live answered
No, that is outside the purview of CPview.
Yes, for the overall gateway. Not for specific VS.
It will be the same as the shell.
Single threaded.
Not currently, however the names come from /etc/services.
cpsizeme gathers slightly more sizing details over a period of time, whereas CPview will give you a snapshot as the system exists currently.
In R80.40, you have the CPU Spike Detective, available from JHF 69. See sk166454.
A more detailed session is in the works. If there are specific items you wish to see, please leave them as a comment to this post!
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY