Module "cpcode" (Data Loss Prevention - CPcode)

Syntax

• On the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / each Cluster Member Security Gateway that is part of a cluster., run in the Expert mode:

  fw ctl debug -m cpcode + {all | <List of Debug Flags>}

• On the Scalable Platform Security Group A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected., run in the Expert mode:

  g_fw ctl debug -m cpcode + {all | <List of Debug Flags>}

Note - In addition, see: Module "dlpda" (Data Loss Prevention - Download Agent for Content Awareness) Module "dlpk" (Data Loss Prevention - Kernel Space) Module "dlpuk" (Data Loss Prevention - User Space)

Flag	Description
cplog	Resolving of names and IP addresses for Check Point logs
csv	Creation of CSV files
echo	Prints the function that called the CPcode module
error	General errors
init	Initializing of CPcode system
io	Input / Output functionality for CPcode module
ioctl	IOCTL control messages to kernel
kisspm	Kernel Infrastructure Pattern Matcher
memory	Memory allocation operations
persist	Operations on persistence domains
policy	Policy operations
run	Policy operations
url	Operations on URLs
vm	Virtual Machine execution
warning	General warnings