Packet drop counters increasing for Check Point


Check Point


Indeni will track packet drop counters and alert if any important counters are incrementing.

Remediation Steps

Contact your technical support provider.

How does this work?

indeni uses the built-in Check Point "asg_drop_monitor" command to retreive the number of drops.

Why is this important?

A large increase in dropped packets could mean that a new rule is blocking legitimate traffic, or that some traffic need a firewall rule to be allowed out.

Without Indeni how would you find this?

An administrator could login and manually run the command.

View Source Code