Scribd
Upload
589 views

Basic Checkpoint Troubleshooting

The document provides basic troubleshooting steps for enterprise firewalls, including checking logs to see if traffic was accepted or denied, verifying routes point to the correct gateways for source and destination IPs, and using tools like tcpdump to check for return traffic like TCP SYN-ACK packets from destinations. It also lists specific Checkpoint firewall troubleshooting steps like using SmartView Tracker for logs, netstat/route commands to check routes, and tcpdump/snoop for network traffic inspection.

Uploaded by

jcnirmal
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
589 views

Basic Checkpoint Troubleshooting

The document provides basic troubleshooting steps for enterprise firewalls, including checking logs to see if traffic was accepted or denied, verifying routes point to the correct gateways for source and destination IPs, and using tools like tcpdump to check for return traffic like TCP SYN-ACK packets from destinations. It also lists specific Checkpoint firewall troubleshooting steps like using SmartView Tracker for logs, netstat/route commands to check routes, and tcpdump/snoop for network traffic inspection.

Uploaded by

jcnirmal
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 1

Basic Checkpoint Troubleshooting

For every enterprise level stateful inspection firewall the following three basic
troubleshooting steps apply.

1. Check the logs :
The logs will indicate if traffic was accepted or denied.
2. Check the routes:
Verify if the routes point to the right gateway addresses for the source and destination
IP.
3. Perform debug/snoop/tcpdump:
To verify if there is any return traffic (tcp/syn-ack) from the destination.

-
Checkpoint Firewalls:
1. check the logs : Using smartview tracker
2. check the routes: netstat -rn or route get ip , echo sh route dest iclid.
3. perform tcpdump/snoop.

You might also like