pep debug

Description

Controls the debug of the PEPClosed Check Point Identity Awareness Security Gateway that acts as Policy Enforcement Point: receives identities via identity sharing; redirects users to Captive Portal..

Syntax

pep debug

      memory

      off

      on

      reset

      rotate

      set <options>

      spaces [<options>]

      stat

      unset <options>

Parameters

Parameter

Description

memory

Displays the memory consumption by the pepd daemon.

off

Disables the PEP debug.

on

Enables the PEP debug.

Important - After you run this command "pep debug on", you must run the command "pep debug set ..." to determine the required filter.

reset

Resets the PEP debug options for Debug Topics and Severities.

Important - After you run this command "pep debug reset ...", you must run the command "pep debug off" to turn off the debug.

rotate

Rotates the PEP log files - increases the index of each log file:

  • $FWDIR/log/pepd.elg becomes $FWDIR/log/pepd.elg.0,

  • $FWDIR/log/pepd.elg.0 becomes $FWDIR/log/pepd.elg.1

  • And so on.

set <Topic Name> <Severity>

Filters which debug logs PEP writes to the log file based on the specified Debug Topics and Severity.

Available Debug Topics are:

  • all

  • Check Point Support provides more specific topics, based on the reported issue

Available Severities are:

  • all

  • critical

  • events

  • important

  • surprise

Best Practice - We recommend to enable all Topics and all Severities. Run:

pep debug set all all

spaces

      [0 | 1 | 2 | 3 | 4 | 5]

Displays and sets the number of indentation spaces in the $FWDIR/log/pepd.elg file.

The default is 0 spaces.

stat

Shows the PEP current debug status.

unset <Topic Name>

Unsets the specified Debug Topic(s).

Important - When you enable the debug, it affects the performance of the pepd daemon. Make sure to turn off the debug after you complete your troubleshooting.