Alert Modes
The Alert Modes are:
-
Enabled - The system sends an alert for the selected events.
-
Disabled - The system does not send alerts for the selected events.
-
Monitor - The system generates a log entry instead of an alert.
Diagnostic Events
|
Best Practice - Run the " |
If the test fails, an alert appears. The alerts continue to appear in the Message of the Day (MOTD) until the issues are resolved.
When the issues are resolved, a Clear Alert message appears the next time the test runs.
You can manually run the "smo verifiers
" command (the "show smo verifiers report
" command) to confirm the issue is resolved.
Important Notes
-
By default, the tests run at 01h:00m each night.
Changing the default time
Step
Instructions
1
Connect to the command line on the Security Group
A logical group of Security Gateway Modules that provides Active/Active cluster functionality. A Security Group can contain one or more Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway..
2
Log in to the Expert mode.
3
Edit the
$SMODIR/conf/asgsnmp.conf
file:vi $SMODIR/conf/asgsnmp.conf
4
Change the value in this line:
asg_diag_alert_wrapper
5
Save the changes in the file and exit the editor.
6
Copy this file to all other Security Group Members:
asg_cp2blades $SMODIR/conf/asgsnmp.conf
-
By default, all tests run.
Excluding the tests
Note - When you manually run the "
show smo verifiers report
" command, the complete set of tests runs, even those you excluded.Step
Instructions
1
Connect to the command line on the Security Group.
2
Log in to the Expert mode.
3
Run:
$SMODIR/conf/asg_diag_config
4
Add this line to the file:
excluded_tests=[<Test1>][,<Test2>,...]
5
Save the changes in the file and exit the editor.
6
Copy this file to all other Security Group Members:
asg_cp2blades $SMODIR/conf/asgsnmp.conf
-
All failed tests show in the MOTD.
Excluding failed test notifications from the MOTD
Step
Instructions
1
Connect to the command line on the Security Group.
2
Log in to the Expert mode.
3
Run:
# $SMODIR/conf/asg_diag_config
4
Set the
failed_tests_motd
parameter tooff
5
Copy this file to all other Security Group Members:
asg_cp2blades $SMODIR/conf/asg_diag_config
6
Go to Gaia gClish
The name of the global command line shell in Check Point Gaia operating system for Security Gateway Modules. Commands you run in this shell apply to all Security Gateway Module in the Security Group.: enter
gclish
and press Enter.7
Enforce the change:
show smo verifiers report
You can also wait for the next time the "
smo verifiers
" run automatically.Disabling the MOTD feature
Step
Instructions
1
Connect to the command line on the Security Group.
2
Log in to the Expert mode.
3
Edit the
$SMODIR/conf/asg_diag_config
file:vi $SMODIR/conf/asg_diag_config
4
Set the value of the
motd
parameter tooff
.5
Save the changes in the file and exit the editor.
6
Copy this file to all other Security Group Members:
asg_cp2blades $SMODIR/conf/asg_diag_config
7
Go to Gaia
Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. gClish: enter
gclish
and press Enter.8
Enforce the change:
show smo verifiers report
You can also wait for the next time the "
smo verifiers
" run automatically.
Known Limitations of the SMO Verifiers Test
By default, the "smo verifiers
" command only shows a warning about resource mismatches between Security Group Members.
If the verification test results show Passed in the output, no more steps are necessary.

Step |
Instructions |
|
---|---|---|
1 |
Connect to the command line on the Security Group. |
|
2 |
Log in to the Expert mode. |
|
3 |
Edit the
|
|
4 |
Search for this parameter:
|
|
5 |
Set the value of this parameter to one of these values:
|
|
6 |
Save the changes in the file and exit the editor. |
|
7 |
Copy this file to all other Security Group Members:
|