Module "fg" (FloodGate-1 - QoS)

Syntax

• On the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / each Cluster Member Security Gateway that is part of a cluster., run in the Expert mode:

  fw ctl debug -m fg + {all | <List of Debug Flags>}

• On the Scalable Platform Security Group A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected., run in the Expert mode:

  g_fw ctl debug -m fg + {all | <List of Debug Flags>}

Flag	Description
chain	Tracing each packet through FloodGate-1 stages in the cookie chain
chainq	Internal Chain Queue mechanism - holding and releasing of packets during critical actions (policy installation and uninstall)
classify	Classification of connections to QoS Check Point Software Blade on a Security Gateway that provides policy-based traffic bandwidth management to prioritize business-critical traffic and guarantee bandwidth and control latency. rules
conn	Processing and identification of connection
dns	DNS classification mechanism
drops	Dropped packets due to WFRED policy
dropsv	Dropped packets due to WFRED policy - with additional debug information (verbose)
error	General errors
flow	Internal flow of connections (direction, interfaces, buffers, and so on)
fwrate	Rate statistics for each interface and direction
general	Currently is not used
install	Policy installation
llq	Low latency queuing
log	Everything related to calls in the log
ls	Processing of connections in ClusterXL in Load Sharing Mode
memory	Memory allocation operations
multik	Processing of connections in CoreXL Performance-enhancing technology for Security Gateways on multi-core processing platforms. Multiple Check Point Firewall instances are running in parallel on multiple CPU cores. Firewall instances Notes: In addition, see Module "multik" (Multi-Kernel Inspection - CoreXL). In a cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing., enable the debug flag "multik" in the Module "cluster" (ClusterXL). If you use the IPsec VPN Check Point Software Blade on a Security Gateway that provides a Site to Site VPN and Remote Access VPN access. Software Blade Specific security solution (module): (1) On a Security Gateway, each Software Blade inspects specific characteristics of the traffic (2) On a Management Server, each Software Blade enables different management capabilities., enable the debug flag "multik" in the Module "VPN" (Site-to-Site VPN and Remote Access VPN).
pkt	Packet recording mechanism
policy	QoS policy rules matching
qosaccel	Acceleration of QoS traffic
rates	Rule Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session. and connection rates (IQ Engine behavior and status)
rtm	Failures in information gathering in the Real Time Monitoring module Note - In addition, see Module "RTM" (Real Time Monitoring).
sched	Basic scheduling information
tcp	TCP streaming (re-transmission detection) mechanism
time	Currently is not used
timers	Reports of internal timer ticks Warning - Prints many messages, without real content.
url	URL and URI for QoS classification
verbose	Prints additional information (used with other debug flags)