Module "NRB" (Next Rule Base)

Syntax

• On the Security Gateway / each Cluster Member Check Point Firewall that is part of a cluster., run in the Expert mode:

  fw ctl debug -m NRB + {all | <List of Debug Flags>}

• On the Scalable Platform Security Group A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Check Point Firewall. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected., run in the Expert mode:

  g_fw ctl debug -m NRB + {all | <List of Debug Flags>}

Flag	Description
address	Information about connection's IP address
appi	Rules and applications Note - In addition, see Module "APPI" (Application Control Inspection).
coverage	Coverage times (entering, blocking, and time spent)
dlp	Data Loss Prevention Software Blade on a Check Point Firewall that detects and prevents the unauthorized transmission of confidential information outside the organization. Acronym: DLP. Note - In addition, see: Module "dlpda" (Data Loss Prevention - Download Agent for Content Awareness) Module "dlpk" (Data Loss Prevention - Kernel Space) Module "dlpuk" (Data Loss Prevention - User Space)
error	General errors
info	General information
match	Rule Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session. matching
memory	Memory allocation operations
module	Operations in this debug module
policy	Policy installation
sdwan	SD-WAN
sec_rb	Security rulebase
session	Session layer
ssl_insp	HTTPS Inspection Feature on a Check Point Firewall that inspects traffic encrypted by the Secure Sockets Layer (SSL) protocol for malware or suspicious patterns. Synonym: SSL Inspection. Acronyms: HTTPSI, HTTPSi.
subject	Prints the debug subject of each debug message
timestamp	Prints the timestamp for each debug message (changes when you enable the debug flag 'coverage')
verbose	Prints additional information (used with other debug flags)
vs	Prints the VSID of the debugged Virtual System
warning	General warnings