R81 Quantum Maestro Administration Guide

General Diagnostic in Security Groups

Based on the OSI model, you can run these commands:

Layer
Number

Layer
Name

Recommended
Diagnostic Commands

7

Application

N / A

6

Presentation

For information about the Firewall drops, run this command in the Expert mode:

drop monitor

See Packet Drop Monitoring (drop_monitor).

For information about the Firewall drops, run this command in the Expert mode:

g_fw ctl zdebug + drop

For information about the Software Blade Specific security solution (module): (1) On a Security Gateway, each Software Blade inspects specific characteristics of the traffic (2) On a Management Server, each Software Blade enables different management capabilities. Updates, run this command in the Expert mode:

asg_swb_update_verifier

See Collecting System Diagnostics (smo verifiers).

Examine the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. logs on the Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. or Log Server Dedicated Check Point server that runs Check Point software to store and process logs.

5

Session

For information about the Connections table, run this command in the Expert mode:

g_fw tab -t connections -s

For information about the Firewall drops, run this command in the Expert mode:

g_fw ctl zdebug + drop

For information about the performance, run this command in Gaia gClish The name of the global command line shell in Check Point Gaia operating system for Security Appliances connected to Check Point Quantum Maestro Orchestrators. Commands you run in this shell apply to all Security Appliances in the Security Group. or the Expert mode:

asg perf -v -p

See Monitoring Performance (asg perf).

For information about the VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. mode, run this command:

asg perf -vs all -v --vvxxx

See Monitoring Performance (asg perf).

4

Transport

For information about the Correction Layer and traffic flow, use the g_tcpdump command in the Expert mode

See Multi-blade Traffic Capture (tcpdump).
For information about the VPN, examine the Security Gateway logs on the Management Server or Log Server

3

Network

In the Expert mode, run these commands:

For information about the traffic:

asg_ifconfig

See Monitoring Traffic (asg_ifconfig).

For information about the routes:

asg_route

See Collecting System Diagnostics (smo verifiers).

For information about the routes:

asg_dr_verifier

See Collecting System Diagnostics (smo verifiers).

For information about the routes:

netstat -rn

For information about the routes:

route

In Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. gClish, run these commands:

For information about the traffic:

asg_ifconfig

See Monitoring Traffic (asg_ifconfig).

For information about the routes:

asg_route

See Collecting System Diagnostics (smo verifiers).

For information about the routes:

show route ...

2

Data Link

For information about the Bridge interfaces, run this command in Gaia gClish or the Expert mode:

asg_br_verifier

See Layer 2 Bridge Verifier (asg_br_verifier, asg_brs_verifier).

1

Physical

Run this command in Gaia gClish:

show maestro port <Port>

For information about the Bond interfaces, run this command in the Expert mode:

cat /proc/net/bonding/<Name of Bond Interface>

For information about the Port Link, run this command in the Expert mode:

ethtool ethsBP<X>-<XX>

For information about the interface statistics, run this command in the Expert mode:

ethtool -S ethsBP<X>-<XX>

10 March 2025

© 2020 - 2025 Check Point Software Technologies Ltd.