Module "CI" (Content Inspection)

Syntax

• On the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / each Cluster Member Security Gateway that is part of a cluster., run in the Expert mode:

  fw ctl debug -m CI + {all | <List of Debug Flags>}

• On the Scalable Platform Security Group A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected., run in the Expert mode:

  g_fw ctl debug -m CI + {all | <List of Debug Flags>}

Flag	Description
address	Prints connection addresses (as Source_IP:Source_Port -> Dest_IP:Dest_Port)
av	Anti-Virus Check Point Software Blade on a Security Gateway that uses real-time virus signatures and anomaly-based protections from ThreatCloud to detect and block malware at the Security Gateway before users are affected. Acronym: AV. inspection
coverage	Coverage times (entering, blocking, and time spent)
crypto	Basic information about encryption and decryption
error	General errors
fatal	Fatal errors
filter	Basic information about URL filters
info	General information
ioctl	Currently is not used
memory	Memory allocation operations
module	Operations in the Content Inspection module (initialization, module loading, calls to the module, policy loading, and so on)
policy	Content Inspection policy
profile	Basic information about the Content Inspection module (initialization, destroying, freeing)
regexp	Regular Expression library
session	Session layer
stat	Content Inspection statistics
subject	Prints the debug subject of each debug message
timestamp	Prints the timestamp for each debug message (changes when you enable the debug flag 'coverage')
track	Use only for very limited important debug prints, so it can be used in a loaded environment - Content-Disposition, Content-Type, extension validation, extension matching
uf	URL filters and URL cache
vs	Prints the VSID of the debugged Virtual System
warning	General warnings