Module "APPI" (Application Control Inspection)

Syntax

• On the Security Gateway / each Cluster Member Check Point Firewall that is part of a cluster., run in the Expert mode:

  fw ctl debug -m APPI + {all | <List of Debug Flags>}

• On the Scalable Platform Security Group A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Check Point Firewall. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected., run in the Expert mode:

  g_fw ctl debug -m APPI + {all | <List of Debug Flags>}

Flag	Description
account	Accounting information
address	Information about connection's IP address
appi_ssl	Application Control Software Blade on a Check Point Firewall that allows granular control over specific web-enabled applications by using deep packet inspection. Acronym: APPI. for SSL
btime	Browse time
connection	Application Control connections
coverage	Coverage times (entering, blocking, and time spent)
delay_match	Internal match operations
error	General errors
global	Global policy operations
info	General information
limit	Application Control limits
memory	Memory allocation operations
module	Operations in this debug module
observer	Classification Object (CLOB) observer (data classification)
policy	Application Control policy
referrer	Application Control referrer
sdwan	SD-WAN
subject	Prints the debug subject of each debug message
timestamp	Prints the timestamp for each debug message (changes when you enable the debug flag 'coverage')
urlf_ssl	URL Filtering Software Blade on a Check Point Firewall that allows granular control over which web sites can be accessed by a given group of users, computers or networks. Acronym: URLF. for SSL
verbose	Prints additional information (used with other debug flags)
sdwan	SD-WAN
vs	Prints the VSID of the debugged Virtual System
warning	General warnings