Debug Configuration

A number of debug configurations are available, which can control different aspects of CDT's operation.

Change the CDT primary configuration file (CDT Primary Configuration File) in this way in the Expert mode:

Step

Description

1

Back up the current $CDTDIR/CentralDeploymentTool.xml file:

cp -v $CDTDIR/CentralDeploymentTool.xml{,_ORIGINAL}

2

Edit the current $CDTDIR/CentralDeploymentTool.xml file:

vi $CDTDIR/CentralDeploymentTool.xml

3

Go to the end of the file.

4

Add the applicable keys (see the table below) above the last tag "</CentralDeploymentTool>" in this way:

Copy 
<?xml version="1.0" encoding="UTF-8" ?>
<CentralDeploymentTool>

  ... ... ...

  <Debug KEY1="VALUE1"/>

  <Debug KEY2="VALUE2"/>

  <Debug KEY3="VALUE3"/>

  ... ... ...

  <Debug KEYn="VALUEn"/>

</CentralDeploymentTool>

5

Save the changes in the file and exit the editor.

6

Run the CDT.

Important:

  • If a key is not configured explicitly, then the CDT uses its default value (see the table below).

  • Enclose all values in double-quotes.

  • String values are case-sensitive.

Table: Debug configuration keys

Key Name

Default Value

Description

ClusterValidationTimeout

600

How much time (in seconds) to wait for Cluster Members to synchronize.

CollectLogsTimeout

600

How much time (in seconds) to wait for CPUSE logs collection to complete on the target Security Gateways and Cluster Members.

CreateSnapshotTimeout

5400

How much time (in seconds) to wait for Gaia snapshot to complete on the target Security Gateways and Cluster Members.

CUSyncForVRRP

false

If set to "true", runs a cluster Connectivity Upgrade on a VRRP Cluster (for specified clients with packages that support this).

For more information about the cluster Connectivity Upgrade, see sk107042.

CuSyncTimeout

900

How much time (in seconds) to wait for a cluster synchronization to complete during a Connectivity Upgrade.

For more information about the cluster Connectivity Upgrade, see sk107042.

DaCliCommandRetry

6

Note - This key is supported from CDT 2.2.

How many times CDT should try to run CPUSE commands on the target Security Gateways and Cluster Members before giving up.

DaCliCommandTimeout

10

Note - This key is supported from CDT 2.2.

How much time (in seconds) to wait for the CPUSE Deployment Agent to respond on the target Security Gateways and Cluster Members.

DbgetTimeout

300

How much time (in seconds) to wait for the Gaia "dbget" command to complete on the target Security Gateways and Cluster Members.

DbsetTimeout

300

How much time (in seconds) to wait for the Gaia "dbset" command to complete on the target Security Gateways and Cluster Members.

DbeditTimeout

300

How much time (in seconds) to wait for the "dbedit" command to complete on the Management Server.

DownloadingFromCloud

3600

How much time (in seconds) to wait for a download from Check Point Cloud to complete on the target Security Gateways and Cluster Members.

ExecuteImportCmdTimeout

600

How much time (in seconds) to wait for the CPUSE "import" command to complete on the target Security Gateways and Cluster Members.

ExecuteInstallCmdTimeout

600

How much time (in seconds) to wait for the CPUSE "install" command to complete on the target Security Gateways and Cluster Members.

ExecuteUninstallCmdTimeout

600

How much time (in seconds) to wait for the CPUSE "uninstall" command to start on the target Security Gateways and Cluster Members.

FinishImportTimeout

1800

How much time (in seconds) to wait for a package import to complete on the target Security Gateways and Cluster Members.

FinishUninstallTimeout

3600

How much time (in seconds) to wait for a package uninstall to complete on the target Security Gateways and Cluster Members.

InstallationTimeout

10800

Timeout (in seconds) for a package installation on the target Security Gateways and Cluster Members.

MailNotificationSender

CDT-Do_Not_Reply@checkpoint.com

Email address of the notification sender.

MDSAuditing

false

If set to "true", then on a Multi-Domain Security Management Server requires the administrator to enter the Superuser username and password to run installations.

The CDT logs this username for auditing purposes.

MinimalUptime

720

How much time (in seconds) to wait before CDT continues the required operation on the target Security Gateways and Cluster Members.

RemoteDefaultPassword

admin

The default password to configure during the RMA Restore procedure on the target Security Gateways and Cluster Members.

SkipVerifySupportedByOS

false

If set to "true", CDT skips the verification, whether the Management Server supports an upgrade to the new target version.

StartDATimeout

300

How much time (in seconds) to wait for the CPUSE "DA" service to start on the target Security Gateways and Cluster Members.

StopDATimeout

300

How much time (in seconds) to wait for the CPUSE "DA" service to stop on the target Security Gateways and Cluster Members.

ValidatePolicyTimeout

1200

How much time (in seconds) to wait for a Security Gateway to fetch its Security Policy.

ValidateVSXPolicyTimeout

1800

How much time (in seconds) to wait for a VSX Gateway to fetch its Security Policy.

WaitAfterReboot

300

How much time (in seconds) to wait after the reboot on the target Security Gateways and Cluster Members.

WaitForRebootCompletionTimeout

900

How much time (in seconds) to wait for the reboot to complete on the target Security Gateways and Cluster Members.