This is a real life sample alert from the indeni guide to preemptive maintenance for Check Point Firewalls. Description: This firewall used to have (51) proxy ARP entries. They have disappeared suddenly from the output of “fw ctl arp”. Proxy ARP behavior may be impacted. Manual Remediation Steps: If this is due to an interface being taken […]

The summary: SmartWorkflow helps you track your rulebase, the Compliance blade helps you identify specific configurations that are not in compliance with known security regulations. Both exist in order to ensure your firewall configuration is secure and so, your network is secure. indeni’s role is to make sure your firewall works – performance, log flow, […]

This is a real life sample alert from the indeni Check Point Firewall configuration guide.  Description: There are 248742 concurrent connections while the limit is 250000. The connection table limit should be increased to ensure uninterrupted operation. Manual Remediation Steps: Upgrading to the GAIA OS can resolve the need to set a connection table limit. […]

This is a real life sample alert from the indeni Check Point Firewall guide to alerts. Alert Description: The memory usage in the operating system is higher than the high threshold. It is now at 92.0%. Review the list of processes below. If possible disable device functions which are not required. fwm (SmartCenter and Management-related […]

This is a real life sample alert from indeni. Description: This cluster member has SecureXL disabled. This does not match the SecureXL configuration of other cluster members. Manual Remediation Steps: Compare the SecureXL configuration of all members of this cluster using “fwaccel stat” and identify discrepancies. We also suggest reading SK41397. How does this alert […]

We have been running a webinar for a while now that discusses the top configuration-related mistakes we see people making with Check Point firewalls. Some of the sessions I ran myself! Since many attendees asked for a document detailing the tips, we thought we’d make it available here. Top checks to run regularly on your […]

This is a real life sample alert from indeni. Description: The firewall kernel memory usage has crossed the high threshold. It is now at 80.0%. Manual Remediation Steps: On open servers, you can install more memory. However, the maximum amount of memory that can be used by the kernel is 2 GB. You can decrease […]

This is a real life sample alert from indeni. Description: The Tx queue batch size on this device is: 1. A too high Tx queue batch size may increase latency. This can be a severe issue for applications that are sensitive to high latency. Manual Remediation Steps: For more information on this issue please review […]

This is a real life sample alert from indeni. The alert applies to Check Point firewalls, F5 Load Balancers, and any other Unix-based device. Description: Some file systems have reached a high usage of inodes. To learn more about inodes, please read the Wikipedia entry. SOL12263 also has a reference to this (for F5©). Affected File […]

This is a real life sample alert from the Indeni Check Point Firewall Configuration Alert Guide. Description: Indeni has identified that some of the on-board NICs of this open server are being used. Traffic on these on-board NICs may be unstable and some packets may be dropped or experience errors. Review the list of NICs […]

This is a real life sample alert from indeni. Description: Having one or more NICs assigned to the same CPU core as an fw_worker will result in degraded performance. Affected Cores: Core 0 is assigned to both eth1 and fw_0 Manual Remediation Steps: Update the affinity of cores. Follow the CoreXL documentation. How does this […]

This is a real life sample alert from indeni Description: Some of the device’s VPN peers are not responding to VPN traffic. Affected VPN Peers VPN peer 191.119.141.40 is currently not responding Manual Remediation Steps: The VPN peer is not responding to VPN traffic. Please check network connectivity and contact the administrator of the VPN […]