Module 'multik' (Multi-Kernel Inspection - CoreXL)

Syntax

• On the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / each Cluster Member Security Gateway that is part of a cluster., run in the Expert mode:

  fw ctl debug -m multik + {all | <List of Debug Flags>}

• On the Scalable Platform Security Group, run in the Expert mode:

  g_fw ctl debug -m multik + {all | <List of Debug Flags>}

Notes: When you enable the debug flag 'multik' in the Module 'fw' (Firewall), it enables all the debug flags in this debug module, except for the debug flag 'packet'. In a cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing., enable the debug flag "multik" in the Module 'cluster' (ClusterXL). If you use the IPsec VPN Check Point Software Blade on a Security Gateway that provides a Site to Site VPN and Remote Access VPN access. Software Blade Specific security solution (module): (1) On a Security Gateway, each Software Blade inspects specific characteristics of the traffic (2) On a Management Server, each Software Blade enables different management capabilities., enable the debug flag "multik" in the Module 'VPN' (Site-to-Site VPN and Remote Access VPN). If you use the QoS Check Point Software Blade on a Security Gateway that provides policy-based traffic bandwidth management to prioritize business-critical traffic and guarantee bandwidth and control latency. Software Blade, enable the debug flag "multik" in the Module 'fg' (FloodGate-1 - QoS).

Flag	Description
api	Registration and unregistration of cross-instance function calls
cache_tab	Cache table infrastructure
conn	Creation and deletion of connections in the dispatcher table
counter	Cross-instance counter infrastructure
error	General errors
event	Cross-instance event aggregation infrastructure
fwstats	Firewall statistics
ioctl	Distribution of IOCTLs to different CoreXL Performance-enhancing technology for Security Gateways on multi-core processing platforms. Multiple Check Point Firewall instances are running in parallel on multiple CPU cores. Firewall instances
lock	Obtaining and releasing the fw_lock on multiple CoreXL Firewall instances
message	Cross-instance messages (used for local sync and port scanning)
packet	For each packet, shows the CoreXL SND dispatching decision (CoreXL Firewall instance and reason)
packet_err	Invalid packets, for CoreXL SND could not make a dispatching decision
prio	Firewall Priority Queues (refer to sk105762)
queue	Packet queue
quota	Cross-instance quota table (used by the Network Quota feature)
route	Routing of packets
state	Starting and stopping of CoreXL Firewall instances, establishment of relationship between CoreXL Firewall instances
temp_conns	Temporary connections
uid	Cross-instance Unique IDs
vpn_multik	MultiCore VPN (see sk118097)