Module "UPIS" (Unified Policy Infrastructure)

Syntax

• On the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / each Cluster Member Security Gateway that is part of a cluster., run in the Expert mode:

  fw ctl debug -m UPIS + {all | <List of Debug Flags>}

• On the Scalable Platform Security Group A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected., run in the Expert mode:

  g_fw ctl debug -m UPIS + {all | <List of Debug Flags>}

Note - In addition, see: Module "UP" (Unified Policy) Module "upconv" (Unified Policy Conversion)

Flag	Description
address	Information about connection's IP address
clob	Classification Object (CLOB) observer (data classification)
coverage	Coverage times (entering, blocking, and time spent)
cpdiag	CPDiag operations
crumbs	Currently is not used
db	SQLite Database operations
dnd	Processing of Dynamic & Domain objects
error	General errors
fwapp	Information about policy installation for the FireWall application
info	General information
initialapp	Information about the Initial Install Policy App
memory	Memory allocation operations
mgr	Policy installation manager
module	Operations in the Unified Policy Infrastructure module (initialization, module loading, calls to the module, and so on)
mutex	Unified Policy internal mutex operations
policy	Unified Policy Infrastructure internal operations
report	Various reports about Unified Policy installations
sna	Operations on SnA objects ("Services and Application")
subject	Prints the debug subject of each debug message
tables	Operations on kernel tables
timestamp	Prints the timestamp for each debug message (changes when you enable the debug flag 'coverage')
topo	Information about topology and Anti-Spoofing of interfaces; about Address Range objects
upapp	Information about policy installation for Unified Policy application
update	Information about policy installation for CMI Update application
verbose	Prints additional information (used with other debug flags)
vpn	VPN classifier
vs	Prints the VSID of the debugged Virtual System
warning	General warnings