Aggressive Aging enabled-checkpoint-all
Vendor: checkpoint
OS: all
Description:
Aggressive Aging turning on means the firewall is under an extreme load. If this happens, indeni will alert.
Remediation Steps:
Run “fw ctl pstat” for more information. Determine what may be causing the excessive load on the firewall.
chkp-fw-ctl-pstat-vsx
name: chkp-fw-ctl-pstat-vsx
description: Run "fw ctl pstat" on all VS's in a VSX environment.
type: monitoring
monitoring_interval: 4 minutes
requires:
vendor: checkpoint
vsx: 'true'
role-firewall: 'true'
comments:
kernel-memory-usage:
why: |
To get information about the total memory usage from machine
how: |
By reading the information in each VS context with the Check point command "fw ctl pstat"
can-with-snmp: false
can-with-syslog: false
chkp-agressive-aging:
why: |
To get information about the agressive-aging for connections if activated over the machine
how: |
By reading the information about "Agressive Aging" if "On" in each of VS context with the Check point
command "fw ctl pstat"
can-with-snmp: false
can-with-syslog: false
virtual-memory-usage:
why: |
To get information about the total virtual memory usage for the machine
how: |
By reading the information about "Virtual Memory" in each of VS context with the Check point
command "fw ctl pstat"
can-with-snmp: false
can-with-syslog: false
steps:
- run:
type: SSH
file: fw-ctl-pstat-vsx.remote.1.bash
parse:
type: AWK
file: fw-ctl-pstat-vsx.parser.1.awk
check_point_aggressive_aging_vsx
Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/rules/templatebased/checkpoint/check_point_aggressive_aging_vsx.scala