Support Center > Search Results > SecureKnowledge Details
How to collect a CPinfo from the Endpoint Security Client
Solution

Important Notes:

 

Follow these steps to collect CPinfo and log files on the Endpoint Security Client machine:

  1. Double-click on the client tray icon, or right-click and select "Display Overview":



  2. In the "Overview" pane, click on "Advanced" - in the "Logging" section, click on "Collect" button:

  3. Configure the client to collect the logs with the Extended detail level:

    1. On the 1st screen, press 'c' to configure:
      Check Point Log Collection Tool
      -------------------------------
      Current Configuration:
      
      Detail level.............. <General>
      Log files since........... <28/04/2014>
      Upload to Check Point..... <Enabled>
      
      Press 'c' to configure
      Press 'd' to disable upload to Check Point
      Press <Enter> to start
      Press 'q' to quit
      
    2. On the 2nd screen, press '1' to change the "Detail level":
      Check Point Log Collection Tool Configuration
      ---------------------------------------------
      1) Detail level.............. <General>
      2) Log files since........... <28/04/2014>
      3) Upload to Check Point..... <Enabled>
      
      Choose setting [Press <Enter> to skip]: 1
      
    3. On the 3rd screen, press '3' to set the "Extended" level:
      Collection Detail Configuration
      -------------------------------
      
      Current detail level is <General>
      
      1) Basic    - Minimum amount of information
      2) General  - Most common information (Recommended)
      3) Extended - Maximum amount of information (May take longer to complete)
      
      
      Enter detail level [Press <Enter> to skip]: 3
      
    4. On the 4th screen, press 'Enter' to apply and start collecting the information:
      Check Point Log Collection Tool Configuration
      ---------------------------------------------
      1) Detail level.............. <Extended>
      2) Log files since........... <28/04/2014>
      3) Upload to Check Point..... <Enabled>
      
      Choose setting [Press <Enter> to skip]: 	Enter
      

 

Show / Hide complete output example
--------------------
Collection Information For Common:
--------------------
Composing file copy list (date filter off)    - Done
Collecting registry entries                   - Done

--------------------
Collection Information For EPAM:
--------------------
Composing file copy list (date filter on)     - Done
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done

--------------------
Collection Information For ClientUI:
--------------------
Composing file copy list (date filter off)    - Done

--------------------
Collection Information For Compliance:
--------------------
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done

--------------------
Collection Information For DA:
--------------------
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done

--------------------
Collection Information For Document Security:
--------------------
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done
Collecting directory listing                  - Done

--------------------
Collection Information For EPC:
--------------------
Composing file copy list (date filter on)     - Done
Composing file copy list (date filter off)    - Done
Collecting registry entries                   - Done

--------------------
Collection Information For EPSInstaller:
--------------------
Composing file copy list (date filter on)     - Done
Composing file copy list (date filter off)    - Done

--------------------
Collection Information For ME:
--------------------
Composing file copy list (date filter on)     - Done
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done

--------------------
Collection Information For SA:
--------------------
Composing file copy list (date filter on)     - Done
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done
Collecting directory listing                  - Done
Collecting registry entries                   - Done

--------------------
Collection Information For Full Disk Encryption:
--------------------
Composing file copy list (date filter on)     - Done
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done
Collecting registry entries                   - Done

--------------------
Collection Information For Watchdog:
--------------------
Composing file copy list (date filter off)    - Done

--------------------
Running Additional Procedures:
--------------------
"ipconfig.exe"  -all ...        (Common)      - Finished
"netstat.exe"  -ano ...         (Common)      - Finished
"route.exe"  print ...          (Common)      - Finished
"systeminfo.exe" ...            (Common)      - Finished
"msinfo32.exe"  /nfo "D:\Temp\..(Common)      - Finished
"trac.exe" "info" "-t" "20...   (EPC)         - Finished
"trac.exe" "printProxyConf...   (EPC)         - Finished
"wevtutil.exe" qe application ..(Full Disk En - Finished
"wevtutil.exe" qe system      ..(Full Disk En - Finished
"CpInfoPreboot.exe" "preboot" "D(Full Disk En - Finished
"DumpSMBios.exe" "D:\Temp\CPInfo(Full Disk En - Finished
"ListInstalledApps.exe" "D:\Temp(Full Disk En - Finished
"ListPartitions.exe" "D:\Temp\CP(Full Disk En - Finished



Compressing 47\579:  (PAC_1_Pol_CPEPS_SID10_ID_3bc19258-e079-4ad8-b116-a050262a4
... ... output was cut for brevity ... ...
Compressing 148\579:  (EPS_Check Point Endpoint Total Security x64_8.3.937_383_m
Deleting temporary files                      - Done

---------------------
Uploading Cab to Ftp:
---------------------

Starting to upload cab file named: cpinfo.admin.30_04_2014_16_35.zip
Upload progress 100%
File uploaded successfully

Finished Running CPInfo
Information is located at:
C:\Users\admin\CPInfo\cpinfo.admin.30_04_2014_16_35

The information includes the following cabinet files:
cpinfo.admin.30_04_2014_16_35.zip
                                              - Done

Press any key to exit


Note
: the Additional Information output file cpinfo.<username>.xxx.zip is not related to the main CPInfo utility, but can be uploaded to Check Point cloud by using it.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment