Module "multik" (Multi-Kernel Inspection - CoreXL)

Syntax

• On the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / each Cluster Member Security Gateway that is part of a cluster., run in the Expert mode:

  fw ctl debug -m multik + {all | <List of Debug Flags>}

• On the Scalable Platform Security Group A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected., run in the Expert mode:

  g_fw ctl debug -m multik + {all | <List of Debug Flags>}

Notes: When you enable the debug flag 'multik' in the Module "fw" (Firewall), it enables all the debug flags in this debug module, except for the debug flag 'packet'. In a cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing., enable the debug flag "multik" in the Module "cluster" (ClusterXL). If you use the IPsec VPN Check Point Software Blade on a Security Gateway that provides a Site to Site VPN and Remote Access VPN access. Software Blade Specific security solution (module): (1) On a Security Gateway, each Software Blade inspects specific characteristics of the traffic (2) On a Management Server, each Software Blade enables different management capabilities., enable the debug flag "multik" in the Module "VPN" (Site-to-Site VPN and Remote Access VPN). If you use the QoS Check Point Software Blade on a Security Gateway that provides policy-based traffic bandwidth management to prioritize business-critical traffic and guarantee bandwidth and control latency. Software Blade, enable the debug flag "multik" in the Module "fg" (FloodGate-1 - QoS).

Flag	Description
api	Registration and unregistration of cross-instance function calls
cache_tab	Cache table infrastructure
conn	Creation and deletion of connections in the dispatcher table
counter	Cross-instance counter infrastructure
dumbo	Shows the selected CoreXL Performance-enhancing technology for Security Gateways on multi-core processing platforms. Multiple Check Point Firewall instances are running in parallel on multiple CPU cores. Firewall instance
error	General errors
event	Cross-instance event aggregation infrastructure
fwstats	Firewall statistics
ioctl	Distribution of IOCTLs to different CoreXL Firewall instances
lock	Obtaining and releasing the fw_lock on multiple CoreXL Firewall instances
message	Cross-instance messages (used for local sync and port scanning)
packet	For each packet, shows the CoreXL SND dispatching decision (CoreXL Firewall instance and reason)
packet_err	Invalid packets, for CoreXL SND could not make a dispatching decision
prio	Firewall Priority Queues (refer to sk105762)
queue	Packet queue
quota	Cross-instance quota table (used by the Network Quota feature)
route	Routing of packets
state	Starting and stopping of CoreXL Firewall instances, establishment of relationship between CoreXL Firewall instances
temp_conns	Temporary connections
uid	Cross-instance Unique IDs
vpn_multik	MultiCore VPN (see sk118097)