Module 'UP' (Unified Policy)

Syntax

• On the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / each Cluster Member Security Gateway that is part of a cluster., run in the Expert mode:

  fw ctl debug -m UP + {all | <List of Debug Flags>}

• On the Scalable Platform Security Group, run in the Expert mode:

  g_fw ctl debug -m UP + {all | <List of Debug Flags>}

Note - In addition, see: Module 'upconv' (Unified Policy Conversion) Module 'UPIS' (Unified Policy Infrastructure)

Flag	Description
account	Currently is not used
address	Information about connection's IP address
btime	Currently is not used
clob	Classification Object (CLOB) observer (data classification)
connection	Information about connections, transactions
coverage	Coverage times (entering, blocking, and time spent)
error	General errors
info	General information
limit	Unified Policy download and upload limits
log	Some logging operations
mab	Mobile Access Check Point Software Blade on a Security Gateway that provides a Remote Access VPN access for managed and unmanaged clients. Acronym: MAB. handler
manager	Unified Policy manager operations
match	Classification Object (CLOB) observer (data classification)
memory	Memory allocation operations
module	Operations in the Unified Policy module (initialization, module loading, calls to the module, and so on)
policy	Unified Policy internal operations
prob	Currently is not used
prob_impl	Implied matched rules
rulebase	Unified Policy rulebase
sec_rb	Secondary NRB rulebase operations
stats	Statistics about connections, transactions
subject	Prints the debug subject of each debug message
timestamp	Prints the timestamp for each debug message (changes when you enable the debug flag 'coverage')
urlf_ssl	Currently is not used
verbose	Prints additional information (used with other debug flags)
vpn	VPN classifier
vs	Prints the VSID of the debugged Virtual System
warning	General warnings