Monitoring System and Component Status (asg monitor)

Description

Use the "asg monitor" command in Gaia gClish The name of the global command line shell in Check Point Gaia operating system for Security Appliances connected to Check Point Quantum Maestro Orchestrators. Commands you run in this shell apply to all Security Appliances in the Security Group. or the Expert mode to monitor continuously the status of the system and its components.

This command shows the same information as the Showing Hardware State (asg stat), but the information stays on the screen and refreshes at intervals specified by the user. Default: 1 second). To stop the monitor session, press CTRL+C.

Note - If you run this command in a Virtual System context, you only see the output for that Virtual System. You can also specify the Virtual System context as a command parameter.

Syntax

asg monitor

asg monitor -h

asg monitor [-v | -all] [-amw] <Interval>

asg monitor -l

Parameters

Parameter	Description
No Parameters	Shows the Security Group A logical group of Security Appliances that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Every Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected. Member status.
`-h`	Shows the built-in help.
`-amw`	Shows the Anti-Malware policy date instead of the Firewall policy date.
`-v`	Shows only the System component status.
`-all`	Shows both Security Group Member and System component status.
`<Interval>`	Configures the data refresh interval (in seconds) for this session. Default is 10 seconds.
`-l`	Shows legend of column title abbreviations.

Explanation about the Output

Field

Instructions

SGM ID

Identifier of the Security Group Member.

The (local) is the Security Group Member, on which you ran the command.

State

State of the Security Group Member:

ACTIVE - The Security Group Member is processing traffic.
DOWN - The Security Group Member is not processing traffic.
DETACHED/LOST - The Security Group Member is not communicating/reboot.
INIT - The Security Group Member is in the initialization phase after reboot.
READY - The Security Group Member is ready to become Active, and is waiting for all other remote Active members to acknowledge its state.
Active(Sync) – The Security Group Member is in a unicast connections sync.

Note - To change manually the state of the Security Group Member, use the "g_clusterXL_admin" command (see Configuring the Cluster State (g_clusterXL_admin)).

Examples