Checkpoint

Checkpoint Firewall

This template will be deprecated soon.

Description

Monitors checkpoint modules like:

Firewall: Checks module state,packet statistics and connections.
CPU: Overall and per core CPU utilization.
Memory: Hash memory and kernel memory failures.
Disk: Disk utilization.
Sensors: Checks fan,temperature and voltage sensor’s status.
Power Supply: Checks power supply.
Servers: Checks SVN,Log-server and Policy-server status.
High availability: Checks HA state and HA problem (usually: Synchronization,Filter,cphad and fwd) status.

Prerequisites

No prerequisite.

Supported Metric

Monitor Name	Metric Name	Metric Display Name	Unit	Description
Checkpoint Disk Utilization	checkpoint.disk.util	Disk Utilization	%	Provides disk utilization in percent.[OIDs: 1.3.6.1.4.1.2620.1.6.7.6.1.2,1.3.6.1.4.1.2620.1.6.7.6.1.3,1.3.6.1.4.1.2620.1.6.7.6.1.4]
Checkpoint Fan Status	checkpoint.fan.sensor.status	Fan Status		Provides fan speed sensor status.[OIDs: 1.3.6.1.4.1.2620.1.6.7.8.2.1.2,1.3.6.1.4.1.2620.1.6.7.8.2.1.3,1.3.6.1.4.1.2620.1.6.7.8.2.1.4,1.3.6.1.4.1.2620.1.6.7.8.2.1.6]
Checkpoint FW Connections	checkpoint.fw.num.connections	Firewall Concurrent connections		Provides number of concurrent IPv6 and IPv4 connections,peak number of concurrent connections since last reboot and name of security policy currently enforced.[OIDs: 1.3.6.1.4.1.2620.1.1.25.1.0,1.3.6.1.4.1.2620.1.1.25.3.0,1.3.6.1.4.1.2620.1.1.25.4.0]
Checkpoint FW Log-Server Connectivity	checkpoint.fw.log.server.state	Log-Server Connectivity State		Connectivity state with the log server Ok(0),Error(1) and Not Active(2) and if error occurs,its description will be provided.[OIDs: 1.3.6.1.4.1.2620.1.1.30.3.1.3,1.3.6.1.4.1.2620.1.1.30.3.1.4]
Checkpoint FW Memory Failures	checkpoint.fw.hmem.failed.alloc	Hash Memory Allocation Failures		Hash memory allocation failures.[OID: 1.3.6.1.4.1.2620.1.1.26.1.21.0]
	checkpoint.fw.hmem.failed.free	Hash Memory Free Failures		Hash memory free failures.[OID: 1.3.6.1.4.1.2620.1.1.26.1.22.0]
	checkpoint.fw.kmem.failed.alloc	Kernel Memory Allocation Failures		Kernel memory allocation failures.[OID:1.3.6.1.4.1.2620.1.1.26.2.15.0]
	checkpoint.fw.kmem.failed.free	Kernel Memory Free Failures		Kernel memory free failures.[OID: 1.3.6.1.4.1.2620.1.1.26.2.16.0]
Checkpoint FW Module State	checkpoint.fw.module.state	Checkpoint Firewall Module State		The state of the firewall module.[OID: 1.3.6.1.4.1.2620.1.1.1.0]
Checkpoint FW Packet Statistics	checkpoint.fw.accepted.pkts	Firewall Accepted Packets	packet/min	Total number of accepted packets since last reboot.[OID: 1.3.6.1.4.1.2620.1.1.4.0]
	checkpoint.fw.rejected.pkts	Firewall Rejected Packets	packet/min	Total number of rejected packets since last reboot.[OID: 1.3.6.1.4.1.2620.1.1.5.0]
	checkpoint.fw.dropped.pkts	Firewall Dropped Packets	packet/min	Total number of dropped packets since last reboot.[OID: 1.3.6.1.4.1.2620.1.1.6.0]
	checkpoint.fw.logged.pkts	Firewall Logged Packets	packet/min	The number of logged packets.[OID: 1.3.6.1.4.1.2620.1.1.7.0]
Checkpoint HA Problem Status	checkpoint.ha.problem.status	High Availability (HA) Problem Status		Provides High Availability(HA) problem status.[OIDs: 1.3.6.1.4.1.2620.1.5.13.1.2,1.3.6.1.4.1.2620.1.5.13.1.3,1.3.6.1.4.1.2620.1.5.13.1.6]
Checkpoint HA Status	checkpoint.ha.state	Checkpoint HA Status		Provides High Availability(HA) Status. Possible HA states are: Active,Standby,Active Attention,Down. Active - Inspecting traffic,Standby - Ready to inspect traffic but there is another active member,this member is now in the standby mode. Active Attention - The member is blocked because there are no other available members,it will continue as the active member. Down - Member is down or other members see it as down.[OIDs: 1.3.6.1.4.1.2620.1.5.6.0,1.3.6.1.4.1.2620.1.5.5.0,1.3.6.1.4.1.2620.1.5.2.0,1.3.6.1.4.1.2620.1.5.11.0,1.3.6.1.4.1.2620.1.5.102.0]
Checkpoint Overall CPU Utilization	checkpoint.overall.cpu.util	Overall CPU Utilization	%	Overall CPU utilization in percent.[OID: 1.3.6.1.4.1.2620.1.6.7.2.4.0]
Checkpoint Policy Server Status	checkpoint.ps.status	Policy Server Status		Provides policy server status and its information.[OIDs: 1.3.6.1.4.1.2620.1.9.101,1.3.6.1.4.1.2620.1.9.102,1.3.6.1.4.1.2620.1.9.4,1.3.6.1.4.1.2620.1.9.5]
Checkpoint Power Supply Status	checkpoint.powersupply.status	Power Supply Status		Provides power supply status.[OIDs: 1.3.6.1.4.1.2620.1.6.7.9.1.1.1,1.3.6.1.4.1.2620.1.6.7.9.1.1.2]
Checkpoint SVN Status	checkpoint.svn.status	SVN Status		Provides SVN status.[OIDs: 1.3.6.1.4.1.2620.1.6.101.0,1.3.6.1.4.1.2620.1.6.102.0,1.3.6.1.4.1.2620.1.6.4.1.0]
Checkpoint Temperature Status	checkpoint.temp.sensor.status	Temperature Status		Provides status of temperature sensor.[OIDs: 1.3.6.1.4.1.2620.1.6.7.8.1.1.2,1.3.6.1.4.1.2620.1.6.7.8.1.1.3,1.3.6.1.4.1.2620.1.6.7.8.1.1.4,1.3.6.1.4.1.2620.1.6.7.8.1.1.6]
Checkpoint Voltage Status	checkpoint.voltage.status	Voltage Status		Provides voltage sensor status and its value.[OIDs: 1.3.6.1.4.1.2620.1.6.7.8.3.1.2,1.3.6.1.4.1.2620.1.6.7.8.3.1.3,1.3.6.1.4.1.2620.1.6.7.8.3.1.4,1.3.6.1.4.1.2620.1.6.7.8.3.1.6]

Checkpoint Firewall - v2

Description

Checkpoint Firewall - v2 is similar to the previous version,however,this provides additional performance metrics like Checkpoint Memory Used,Checkpoint Memory Total & Checkpoint Memory Utilization.

Monitors checkpoint modules like:

Firewall: Checks module state,packet statistics and connections.
CPU: Overall and per core CPU utilization.
Memory: Hash memory and kernel memory failures.
Disk: Disk utilization.
Sensors: Checks fan,temperature and voltage sensor’s status.
Power Supply: Checks power supply.
Servers: Checks SVN,Log-server and Policy-server status.
High availability: Checks HA state and HA problem (usually: Synchronization,Filter,cphad and fwd) status.

Prerequisites

No prerequisite

Supported Metric

Monitor Name	Metric Name	Metric Display Name	Unit	Description
Checkpoint Disk Utilization	checkpoint.disk.util	Disk Utilization	%	Provides disk utilization in percent.[OIDs: 1.3.6.1.4.1.2620.1.6.7.6.1.2,1.3.6.1.4.1.2620.1.6.7.6.1.3,1.3.6.1.4.1.2620.1.6.7.6.1.4]
Checkpoint Fan Status	checkpoint.fan.sensor.status	Fan Status		Provides fan speed sensor status.[OIDs: 1.3.6.1.4.1.2620.1.6.7.8.2.1.2,1.3.6.1.4.1.2620.1.6.7.8.2.1.3,1.3.6.1.4.1.2620.1.6.7.8.2.1.4,1.3.6.1.4.1.2620.1.6.7.8.2.1.6]
Checkpoint FW Connections	checkpoint.fw.num.connections	Firewall Concurrent connections		Provides number of concurrent IPv6 and IPv4 connections,peak number of concurrent connections since last reboot and name of security policy currently enforced.[OIDs: 1.3.6.1.4.1.2620.1.1.25.1.0,1.3.6.1.4.1.2620.1.1.25.3.0,1.3.6.1.4.1.2620.1.1.25.4.0]
Checkpoint FW Log-Server Connectivity	checkpoint.fw.log.server.state	Log-Server Connectivity State		Connectivity state with the log server Ok(0),Error(1) and Not Active(2) and if error occurs,its description will be provided.[OIDs: 1.3.6.1.4.1.2620.1.1.30.3.1.3,1.3.6.1.4.1.2620.1.1.30.3.1.4]
Checkpoint FW Memory Failures	checkpoint.fw.kmem.failed.free	Kernel Memory Free Failures		Kernel memory free failures.[OID: 1.3.6.1.4.1.2620.1.1.26.2.16.0]
	checkpoint.fw.hmem.failed.free	Hash Memory Free Failures		Hash memory free failures.[OID: 1.3.6.1.4.1.2620.1.1.26.1.22.0]
	checkpoint.fw.kmem.failed.alloc	Kernel Memory Allocation Failures		Kernel memory allocation failures.[OID:1.3.6.1.4.1.2620.1.1.26.2.15.0]
	checkpoint.fw.hmem.failed.alloc	Hash Memory Allocation Failures		Hash memory allocation failures.[OID: 1.3.6.1.4.1.2620.1.1.26.1.21.0]
Hash memory allocation failures.[OID: 1.3.6.1.4.1.2620.1.1.26.1.21.0]	checkpoint.fw.module.state	Checkpoint Firewall Module State		The state of the firewall module.[OID: 1.3.6.1.4.1.2620.1.1.1.0]
Checkpoint FW Packet Statistics	checkpoint.fw.logged.pkts	Firewall Logged Packets	packet/min	The number of logged packets.[OID: 1.3.6.1.4.1.2620.1.1.7.0]
	checkpoint.fw.accepted.pkts	Firewall Accepted Packets	packet/min	Total number of accepted packets since last reboot.[OID: 1.3.6.1.4.1.2620.1.1.4.0]
	checkpoint.fw.dropped.pkts	Firewall Dropped Packets	packet/min	Total number of dropped packets since last reboot.[OID: 1.3.6.1.4.1.2620.1.1.6.0]
	checkpoint.fw.rejected.pkts	Firewall Rejected Packets	packet/min	Total number of rejected packets since last reboot.[OID: 1.3.6.1.4.1.2620.1.1.5.0]
Checkpoint HA Problem Status	checkpoint.ha.problem.status	High Availability (HA) Problem Status		Provides High Availability(HA) problem status.[OIDs: 1.3.6.1.4.1.2620.1.5.13.1.2,1.3.6.1.4.1.2620.1.5.13.1.3,1.3.6.1.4.1.2620.1.5.13.1.6]
Checkpoint HA Status	checkpoint.ha.state	Checkpoint HA Status		Provides High Availability(HA) Status. Possible HA states are: Active,Standby,Active Attention,Down. Active - Inspecting traffic,Standby - Ready to inspect traffic but there is another active member,this member is now in the standby mode. Active Attention - The member is blocked because there are no other available members,it will continue as the active member.Down - Member is down or other members see it as down.[OIDs: 1.3.6.1.4.1.2620.1.5.6.0,1.3.6.1.4.1.2620.1.5.5.0,1.3.6.1.4.1.2620.1.5.2.0,1.3.6.1.4.1.2620.1.5.11.0,1.3.6.1.4.1.2620.1.5.102.0]
Checkpoint Memory Utilization - 32-bit Or 64-bit	checkpoint_memory_utilization	Checkpoint Memory Utilization	%	It monitors the checkpoint memory utilization in percentage.
	checkpoint_memory_total	Checkpoint Memory Total	Bytes	It monitors the checkpoint memory total.[CHECKPOINT-MIB :: memTotalReal : 1.3.6.1.4.1.2620.1.6.7.1.3.0,memTotalReal64 : 1.3.6.1.4.1.2620.1.6.7.4.3.0]
	checkpoint_memory_used	Checkpoint Memory Used	Bytes	It monitors the checkpoint memory used.[CHECKPOINT-MIB :: memActiveReal : 1.3.6.1.4.1.2620.1.6.7.1.4.0,memActiveReal64 : 1.3.6.1.4.1.2620.1.6.7.4.4.0]
Checkpoint Overall CPU Utilization	checkpoint.overall.cpu.util	Overall CPU Utilization	%	Overall CPU utilization in percent.[OID: 1.3.6.1.4.1.2620.1.6.7.2.4.0]
Checkpoint Policy Server Status	checkpoint.ps.status	Policy Server Status		Provides policy server status and its information.[OIDs: 1.3.6.1.4.1.2620.1.9.101,1.3.6.1.4.1.2620.1.9.102,1.3.6.1.4.1.2620.1.9.4,1.3.6.1.4.1.2620.1.9.5]
Checkpoint Power Supply Status	checkpoint.powersupply.status	Power Supply Status		Provides power supply status.[OIDs: 1.3.6.1.4.1.2620.1.6.7.9.1.1.1,1.3.6.1.4.1.2620.1.6.7.9.1.1.2]
Checkpoint SVN Status	checkpoint.svn.status	SVN Status		Provides SVN status.[OIDs: 1.3.6.1.4.1.2620.1.6.101.0,1.3.6.1.4.1.2620.1.6.102.0,1.3.6.1.4.1.2620.1.6.4.1.0]
Checkpoint Temperature Status	checkpoint.temp.sensor.status	Temperature Status		Provides status of temperature sensor.[OIDs: 1.3.6.1.4.1.2620.1.6.7.8.1.1.2,1.3.6.1.4.1.2620.1.6.7.8.1.1.3,1.3.6.1.4.1.2620.1.6.7.8.1.1.4,1.3.6.1.4.1.2620.1.6.7.8.1.1.6]
Checkpoint Voltage Status	checkpoint.voltage.status	Voltage Status		Provides voltage sensor status and its value.[OIDs: 1.3.6.1.4.1.2620.1.6.7.8.3.1.2,1.3.6.1.4.1.2620.1.6.7.8.3.1.3,1.3.6.1.4.1.2620.1.6.7.8.3.1.4,1.3.6.1.4.1.2620.1.6.7.8.3.1.6]

Checkpoint Security Management

Description

Checks management mode (active or not),management status,if management is alive or not and is there any management license violation detected.

Prerequisites

No prerequisite

Supported Metric

Monitor Name	Metric Name	Metric Display Name	Description
Checkpoint Security Management Status	checkpoint.mngmt.active.status	Security Management Mode	Checks whether management mode is active or not.[OID: 1.3.6.1.4.1.2620.1.7.5.0]
	checkpoint.mngmt.status	Security Management Status	Checks whether security management status is OK or not.[OID: 1.3.6.1.4.1.2620.1.7.102.0]
	checkpoint.mngmt.alive.state	Security Management Alive State	Checks whether security management is alive or not.[OID: 1.3.6.1.4.1.2620.1.7.6.0]
	checkpoint.mngmt.licenseviolation.status	Management License Violation Status	Checks if there is license violation detected.[OIDs: 1.3.6.1.4.1.2620.1.7.10.0,1.3.6.1.4.1.2620.1.7.11.0]