Difference between revisions of "hit counter"
From cpwiki.net
(Created page with " [https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk90040&partition=General&product=Security hit counter fw module ...") |
|||
| Line 1: | Line 1: | ||
| + | == Prerequisites for hit counter functionality == | ||
| + | |||
| + | Global Properties that must be enabled | ||
| + | |||
| + | CLI to query(must be in CMA environment on an MDM) | ||
| + | |||
| + | # cpmiquerybin object "" properties "name='firewall_properties'" | grep -i enable_hit_count | ||
| + | :enable_hit_count (1) | ||
| + | |||
| + | |||
| + | # cpmiquerybin object "" properties "name='firewall_properties'" | grep rulebase_uids_in_log | ||
| + | :rulebase_uids_in_log (true) | ||
| + | |||
| + | |||
| + | |||
| + | == max table size (on fw gateways) == | ||
[https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk90040&partition=General&product=Security hit counter fw module max table size] | [https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk90040&partition=General&product=Security hit counter fw module max table size] | ||
Latest revision as of 16:18, 21 September 2017
Prerequisites for hit counter functionality
Global Properties that must be enabled
CLI to query(must be in CMA environment on an MDM)
# cpmiquerybin object "" properties "name='firewall_properties'" | grep -i enable_hit_count :enable_hit_count (1)
# cpmiquerybin object "" properties "name='firewall_properties'" | grep rulebase_uids_in_log :rulebase_uids_in_log (true)
max table size (on fw gateways)
hit counter fw module max table size
sk90040
fw ctl get int fw_rules_uid_max_dic_entries fw ctl set int fw_rules_uid_max_dic_entries VALUE
for surviving reboot... Changing the kernel global parameters for Check Point Security Gateway
