Module "dlpda" (Data Loss Prevention - Download Agent for Content Awareness)

Syntax

• On the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / each Cluster Member Security Gateway that is part of a cluster., run in the Expert mode:

  fw ctl debug -m dlpda + {all | <List of Debug Flags>}

• On the Scalable Platform Security Group A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected., run in the Expert mode:

  g_fw ctl debug -m dlpda + {all | <List of Debug Flags>}

Note - In addition, see: Module "cpcode" (Data Loss Prevention - CPcode) Module "dlpk" (Data Loss Prevention - Kernel Space) Module "dlpuk" (Data Loss Prevention - User Space)

Flag	Description
address	Information about connection's IP address
cmi	Context Management Interface (1) Interface on a Gaia Security Gateway or Cluster member, through which Management Server connects to the Security Gateway or Cluster member. (2) Interface on Gaia computer, through which users connect to Gaia Portal or CLI. / Infrastructure operations
coverage	Coverage times (entering, blocking, and time spent)
ctx	Operations on DLP context
engine	Content Awareness Check Point Software Blade on a Security Gateway that provides data visibility and enforcement. See sk119715. Acronym: CTNT. engine module
error	General errors
filecache	Content Awareness file caching
info	General information
memory	Memory allocation operations
mngr	Currently is not used
module	Initiation / removal of the Content Awareness infrastructure
observer	Classification Object (CLOB) observer (data classification)
policy	Content Awareness policy
slowpath	Currently is not used
subject	Prints the debug subject of each debug message
timestamp	Prints the timestamp for each debug message (changes when you enable the debug flag 'coverage')
verbose	Prints additional information (used with other debug flags)
vs	Prints the VSID of the debugged Virtual System
warning	General warnings