Checkpoint Firewall

This template will be deprecated soon.

Description

Monitors checkpoint modules like:

  1. Firewall: Checks module state,packet statistics and connections.
  2. CPU: Overall and per core CPU utilization.
  3. Memory: Hash memory and kernel memory failures.
  4. Disk: Disk utilization.
  5. Sensors: Checks fan,temperature and voltage sensor’s status.
  6. Power Supply: Checks power supply.
  7. Servers: Checks SVN,Log-server and Policy-server status.
  8. High availability: Checks HA state and HA problem (usually: Synchronization,Filter,cphad and fwd) status.

Prerequisites

No prerequisite.

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Checkpoint Disk Utilizationcheckpoint.disk.utilDisk Utilization%Provides disk utilization in percent.[OIDs: 1.3.6.1.4.1.2620.1.6.7.6.1.2,1.3.6.1.4.1.2620.1.6.7.6.1.3,1.3.6.1.4.1.2620.1.6.7.6.1.4]
Checkpoint Fan Statuscheckpoint.fan.sensor.statusFan StatusProvides fan speed sensor status.[OIDs: 1.3.6.1.4.1.2620.1.6.7.8.2.1.2,1.3.6.1.4.1.2620.1.6.7.8.2.1.3,1.3.6.1.4.1.2620.1.6.7.8.2.1.4,1.3.6.1.4.1.2620.1.6.7.8.2.1.6]
Checkpoint FW Connectionscheckpoint.fw.num.connectionsFirewall Concurrent connectionsProvides number of concurrent IPv6 and IPv4 connections,peak number of concurrent connections since last reboot and name of security policy currently enforced.[OIDs: 1.3.6.1.4.1.2620.1.1.25.1.0,1.3.6.1.4.1.2620.1.1.25.3.0,1.3.6.1.4.1.2620.1.1.25.4.0]
Checkpoint FW Log-Server Connectivitycheckpoint.fw.log.server.stateLog-Server Connectivity StateConnectivity state with the log server Ok(0),Error(1) and Not Active(2) and if error occurs,its description will be provided.[OIDs: 1.3.6.1.4.1.2620.1.1.30.3.1.3,1.3.6.1.4.1.2620.1.1.30.3.1.4]
Checkpoint FW Memory Failurescheckpoint.fw.hmem.failed.allocHash Memory Allocation FailuresHash memory allocation failures.[OID: 1.3.6.1.4.1.2620.1.1.26.1.21.0]
checkpoint.fw.hmem.failed.freeHash Memory Free FailuresHash memory free failures.[OID: 1.3.6.1.4.1.2620.1.1.26.1.22.0]
checkpoint.fw.kmem.failed.allocKernel Memory Allocation FailuresKernel memory allocation failures.[OID:1.3.6.1.4.1.2620.1.1.26.2.15.0]
checkpoint.fw.kmem.failed.freeKernel Memory Free FailuresKernel memory free failures.[OID: 1.3.6.1.4.1.2620.1.1.26.2.16.0]
Checkpoint FW Module Statecheckpoint.fw.module.stateCheckpoint Firewall Module StateThe state of the firewall module.[OID: 1.3.6.1.4.1.2620.1.1.1.0]
Checkpoint FW Packet Statisticscheckpoint.fw.accepted.pktsFirewall Accepted Packetspacket/minTotal number of accepted packets since last reboot.[OID: 1.3.6.1.4.1.2620.1.1.4.0]
checkpoint.fw.rejected.pktsFirewall Rejected Packetspacket/minTotal number of rejected packets since last reboot.[OID: 1.3.6.1.4.1.2620.1.1.5.0]
checkpoint.fw.dropped.pktsFirewall Dropped Packetspacket/minTotal number of dropped packets since last reboot.[OID: 1.3.6.1.4.1.2620.1.1.6.0]
checkpoint.fw.logged.pktsFirewall Logged Packetspacket/minThe number of logged packets.[OID: 1.3.6.1.4.1.2620.1.1.7.0]
Checkpoint HA Problem Statuscheckpoint.ha.problem.statusHigh Availability (HA) Problem StatusProvides High Availability(HA) problem status.[OIDs: 1.3.6.1.4.1.2620.1.5.13.1.2,1.3.6.1.4.1.2620.1.5.13.1.3,1.3.6.1.4.1.2620.1.5.13.1.6]
Checkpoint HA Statuscheckpoint.ha.stateCheckpoint HA StatusProvides High Availability(HA) Status. Possible HA states are: Active,Standby,Active Attention,Down. Active - Inspecting traffic,Standby - Ready to inspect traffic but there is another active member,this member is now in the standby mode. Active Attention - The member is blocked because there are no other available members,it will continue as the active member. Down - Member is down or other members see it as down.[OIDs: 1.3.6.1.4.1.2620.1.5.6.0,1.3.6.1.4.1.2620.1.5.5.0,1.3.6.1.4.1.2620.1.5.2.0,1.3.6.1.4.1.2620.1.5.11.0,1.3.6.1.4.1.2620.1.5.102.0]
Checkpoint Overall CPU Utilizationcheckpoint.overall.cpu.utilOverall CPU Utilization%Overall CPU utilization in percent.[OID: 1.3.6.1.4.1.2620.1.6.7.2.4.0]
Checkpoint Policy Server Statuscheckpoint.ps.statusPolicy Server StatusProvides policy server status and its information.[OIDs: 1.3.6.1.4.1.2620.1.9.101,1.3.6.1.4.1.2620.1.9.102,1.3.6.1.4.1.2620.1.9.4,1.3.6.1.4.1.2620.1.9.5]
Checkpoint Power Supply Statuscheckpoint.powersupply.statusPower Supply StatusProvides power supply status.[OIDs: 1.3.6.1.4.1.2620.1.6.7.9.1.1.1,1.3.6.1.4.1.2620.1.6.7.9.1.1.2]
Checkpoint SVN Statuscheckpoint.svn.statusSVN StatusProvides SVN status.[OIDs: 1.3.6.1.4.1.2620.1.6.101.0,1.3.6.1.4.1.2620.1.6.102.0,1.3.6.1.4.1.2620.1.6.4.1.0]
Checkpoint Temperature Statuscheckpoint.temp.sensor.statusTemperature StatusProvides status of temperature sensor.[OIDs: 1.3.6.1.4.1.2620.1.6.7.8.1.1.2,1.3.6.1.4.1.2620.1.6.7.8.1.1.3,1.3.6.1.4.1.2620.1.6.7.8.1.1.4,1.3.6.1.4.1.2620.1.6.7.8.1.1.6]
Checkpoint Voltage Statuscheckpoint.voltage.statusVoltage StatusProvides voltage sensor status and its value.[OIDs: 1.3.6.1.4.1.2620.1.6.7.8.3.1.2,1.3.6.1.4.1.2620.1.6.7.8.3.1.3,1.3.6.1.4.1.2620.1.6.7.8.3.1.4,1.3.6.1.4.1.2620.1.6.7.8.3.1.6]

Checkpoint Firewall - v2

Description

Checkpoint Firewall - v2 is similar to the previous version,however,this provides additional performance metrics like Checkpoint Memory Used,Checkpoint Memory Total & Checkpoint Memory Utilization.

Monitors checkpoint modules like:

  1. Firewall: Checks module state,packet statistics and connections.
  2. CPU: Overall and per core CPU utilization.
  3. Memory: Hash memory and kernel memory failures.
  4. Disk: Disk utilization.
  5. Sensors: Checks fan,temperature and voltage sensor’s status.
  6. Power Supply: Checks power supply.
  7. Servers: Checks SVN,Log-server and Policy-server status.
  8. High availability: Checks HA state and HA problem (usually: Synchronization,Filter,cphad and fwd) status.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Checkpoint Disk Utilizationcheckpoint.disk.utilDisk Utilization%Provides disk utilization in percent.[OIDs: 1.3.6.1.4.1.2620.1.6.7.6.1.2,1.3.6.1.4.1.2620.1.6.7.6.1.3,1.3.6.1.4.1.2620.1.6.7.6.1.4]
Checkpoint Fan Statuscheckpoint.fan.sensor.statusFan StatusProvides fan speed sensor status.[OIDs: 1.3.6.1.4.1.2620.1.6.7.8.2.1.2,1.3.6.1.4.1.2620.1.6.7.8.2.1.3,1.3.6.1.4.1.2620.1.6.7.8.2.1.4,1.3.6.1.4.1.2620.1.6.7.8.2.1.6]
Checkpoint FW Connectionscheckpoint.fw.num.connectionsFirewall Concurrent connectionsProvides number of concurrent IPv6 and IPv4 connections,peak number of concurrent connections since last reboot and name of security policy currently enforced.[OIDs: 1.3.6.1.4.1.2620.1.1.25.1.0,1.3.6.1.4.1.2620.1.1.25.3.0,1.3.6.1.4.1.2620.1.1.25.4.0]
Checkpoint FW Log-Server Connectivitycheckpoint.fw.log.server.stateLog-Server Connectivity StateConnectivity state with the log server Ok(0),Error(1) and Not Active(2) and if error occurs,its description will be provided.[OIDs: 1.3.6.1.4.1.2620.1.1.30.3.1.3,1.3.6.1.4.1.2620.1.1.30.3.1.4]
Checkpoint FW Memory Failurescheckpoint.fw.kmem.failed.freeKernel Memory Free FailuresKernel memory free failures.[OID: 1.3.6.1.4.1.2620.1.1.26.2.16.0]
checkpoint.fw.hmem.failed.freeHash Memory Free FailuresHash memory free failures.[OID: 1.3.6.1.4.1.2620.1.1.26.1.22.0]
checkpoint.fw.kmem.failed.allocKernel Memory Allocation FailuresKernel memory allocation failures.[OID:1.3.6.1.4.1.2620.1.1.26.2.15.0]
checkpoint.fw.hmem.failed.allocHash Memory Allocation FailuresHash memory allocation failures.[OID: 1.3.6.1.4.1.2620.1.1.26.1.21.0]
Hash memory allocation failures.[OID: 1.3.6.1.4.1.2620.1.1.26.1.21.0]checkpoint.fw.module.stateCheckpoint Firewall Module StateThe state of the firewall module.[OID: 1.3.6.1.4.1.2620.1.1.1.0]
Checkpoint FW Packet Statisticscheckpoint.fw.logged.pktsFirewall Logged Packetspacket/minThe number of logged packets.[OID: 1.3.6.1.4.1.2620.1.1.7.0]
checkpoint.fw.accepted.pktsFirewall Accepted Packetspacket/minTotal number of accepted packets since last reboot.[OID: 1.3.6.1.4.1.2620.1.1.4.0]
checkpoint.fw.dropped.pktsFirewall Dropped Packetspacket/minTotal number of dropped packets since last reboot.[OID: 1.3.6.1.4.1.2620.1.1.6.0]
checkpoint.fw.rejected.pktsFirewall Rejected Packetspacket/minTotal number of rejected packets since last reboot.[OID: 1.3.6.1.4.1.2620.1.1.5.0]
Checkpoint HA Problem Statuscheckpoint.ha.problem.statusHigh Availability (HA) Problem StatusProvides High Availability(HA) problem status.[OIDs: 1.3.6.1.4.1.2620.1.5.13.1.2,1.3.6.1.4.1.2620.1.5.13.1.3,1.3.6.1.4.1.2620.1.5.13.1.6]
Checkpoint HA Statuscheckpoint.ha.stateCheckpoint HA StatusProvides High Availability(HA) Status. Possible HA states are: Active,Standby,Active Attention,Down. Active - Inspecting traffic,Standby - Ready to inspect traffic but there is another active member,this member is now in the standby mode. Active Attention - The member is blocked because there are no other available members,it will continue as the active member.Down - Member is down or other members see it as down.[OIDs: 1.3.6.1.4.1.2620.1.5.6.0,1.3.6.1.4.1.2620.1.5.5.0,1.3.6.1.4.1.2620.1.5.2.0,1.3.6.1.4.1.2620.1.5.11.0,1.3.6.1.4.1.2620.1.5.102.0]
Checkpoint Memory Utilization - 32-bit Or 64-bitcheckpoint_memory_utilizationCheckpoint Memory Utilization%It monitors the checkpoint memory utilization in percentage.
checkpoint_memory_totalCheckpoint Memory TotalBytesIt monitors the checkpoint memory total.[CHECKPOINT-MIB :: memTotalReal : 1.3.6.1.4.1.2620.1.6.7.1.3.0,memTotalReal64 : 1.3.6.1.4.1.2620.1.6.7.4.3.0]
checkpoint_memory_usedCheckpoint Memory UsedBytesIt monitors the checkpoint memory used.[CHECKPOINT-MIB :: memActiveReal : 1.3.6.1.4.1.2620.1.6.7.1.4.0,memActiveReal64 : 1.3.6.1.4.1.2620.1.6.7.4.4.0]
Checkpoint Overall CPU Utilizationcheckpoint.overall.cpu.utilOverall CPU Utilization%Overall CPU utilization in percent.[OID: 1.3.6.1.4.1.2620.1.6.7.2.4.0]
Checkpoint Policy Server Statuscheckpoint.ps.statusPolicy Server StatusProvides policy server status and its information.[OIDs: 1.3.6.1.4.1.2620.1.9.101,1.3.6.1.4.1.2620.1.9.102,1.3.6.1.4.1.2620.1.9.4,1.3.6.1.4.1.2620.1.9.5]
Checkpoint Power Supply Statuscheckpoint.powersupply.statusPower Supply StatusProvides power supply status.[OIDs: 1.3.6.1.4.1.2620.1.6.7.9.1.1.1,1.3.6.1.4.1.2620.1.6.7.9.1.1.2]
Checkpoint SVN Statuscheckpoint.svn.statusSVN StatusProvides SVN status.[OIDs: 1.3.6.1.4.1.2620.1.6.101.0,1.3.6.1.4.1.2620.1.6.102.0,1.3.6.1.4.1.2620.1.6.4.1.0]
Checkpoint Temperature Statuscheckpoint.temp.sensor.statusTemperature StatusProvides status of temperature sensor.[OIDs: 1.3.6.1.4.1.2620.1.6.7.8.1.1.2,1.3.6.1.4.1.2620.1.6.7.8.1.1.3,1.3.6.1.4.1.2620.1.6.7.8.1.1.4,1.3.6.1.4.1.2620.1.6.7.8.1.1.6]
Checkpoint Voltage Statuscheckpoint.voltage.statusVoltage StatusProvides voltage sensor status and its value.[OIDs: 1.3.6.1.4.1.2620.1.6.7.8.3.1.2,1.3.6.1.4.1.2620.1.6.7.8.3.1.3,1.3.6.1.4.1.2620.1.6.7.8.3.1.4,1.3.6.1.4.1.2620.1.6.7.8.3.1.6]

Checkpoint Security Management

Description

Checks management mode (active or not),management status,if management is alive or not and is there any management license violation detected.

Prerequisites

No prerequisite

Supported Metric

Monitor NameMetric NameMetric Display NameUnitDescription
Checkpoint Security Management Statuscheckpoint.mngmt.active.statusSecurity Management ModeChecks whether management mode is active or not.[OID: 1.3.6.1.4.1.2620.1.7.5.0]
checkpoint.mngmt.statusSecurity Management StatusChecks whether security management status is OK or not.[OID: 1.3.6.1.4.1.2620.1.7.102.0]
checkpoint.mngmt.alive.stateSecurity Management Alive StateChecks whether security management is alive or not.[OID: 1.3.6.1.4.1.2620.1.7.6.0]
checkpoint.mngmt.licenseviolation.statusManagement License Violation StatusChecks if there is license violation detected.[OIDs: 1.3.6.1.4.1.2620.1.7.10.0,1.3.6.1.4.1.2620.1.7.11.0]