Support Center > Search Results > SecureKnowledge Details
How to collect a CPinfo from the Endpoint Security Client
Solution

Important Notes:

 

Follow these steps to collect CPinfo and log files on the Endpoint Security Client machine:

  1. Double-click on the client tray icon, or right-click and select "Display Overview":



  2. In the "Overview" pane, click on "Advanced" - in the "Logging" section, click on "Collect" button:



  3. Configure the client to collect the logs with the Extended detail level:

    1. On the 1st screen, press 'c' to configure:
      Check Point Log Collection Tool
      -------------------------------
      Current Configuration:
      
      Detail level.............. <General>
      Log files since........... <28/04/2014>
      Upload to Check Point..... <Enabled>
      
      Press 'c' to configure
      Press 'd' to disable upload to Check Point
      Press <Enter> to start
      Press 'q' to quit
      
    2. On the 2nd screen, press '1' to change the "Detail level":
      Check Point Log Collection Tool Configuration
      ---------------------------------------------
      1) Detail level.............. <General>
      2) Log files since........... <28/04/2014>
      3) Upload to Check Point..... <Enabled>
      
      Choose setting [Press <Enter> to skip]: 1
      
    3. On the 3rd screen, press '3' to set the "Extended" level:
      Collection Detail Configuration
      -------------------------------
      
      Current detail level is <General>
      
      1) Basic    - Minimum amount of information
      2) General  - Most common information (Recommended)
      3) Extended - Maximum amount of information (May take longer to complete)
      
      
      Enter detail level [Press <Enter> to skip]: 3
      
    4. On the 4th screen, press 'Enter' to apply and start collecting the information:
      Check Point Log Collection Tool Configuration
      ---------------------------------------------
      1) Detail level.............. <Extended>
      2) Log files since........... <28/04/2014>
      3) Upload to Check Point..... <Enabled>
      
      Choose setting [Press <Enter> to skip]: 	Enter
      

 

Show / Hide complete output example
--------------------
Collection Information For Common:
--------------------
Composing file copy list (date filter off)    - Done
Collecting registry entries                   - Done

--------------------
Collection Information For EPAM:
--------------------
Composing file copy list (date filter on)     - Done
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done

--------------------
Collection Information For ClientUI:
--------------------
Composing file copy list (date filter off)    - Done

--------------------
Collection Information For Compliance:
--------------------
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done

--------------------
Collection Information For DA:
--------------------
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done

--------------------
Collection Information For Document Security:
--------------------
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done
Collecting directory listing                  - Done

--------------------
Collection Information For EPC:
--------------------
Composing file copy list (date filter on)     - Done
Composing file copy list (date filter off)    - Done
Collecting registry entries                   - Done

--------------------
Collection Information For EPSInstaller:
--------------------
Composing file copy list (date filter on)     - Done
Composing file copy list (date filter off)    - Done

--------------------
Collection Information For ME:
--------------------
Composing file copy list (date filter on)     - Done
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done

--------------------
Collection Information For SA:
--------------------
Composing file copy list (date filter on)     - Done
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done
Collecting directory listing                  - Done
Collecting registry entries                   - Done

--------------------
Collection Information For Full Disk Encryption:
--------------------
Composing file copy list (date filter on)     - Done
Composing file copy list (date filter off)    - Done
Collecting files information                  - Done
Collecting registry entries                   - Done

--------------------
Collection Information For Watchdog:
--------------------
Composing file copy list (date filter off)    - Done

--------------------
Running Additonal Procedures:
--------------------
"ipconfig.exe"  -all ...        (Common)      - Finished
"netstat.exe"  -ano ...         (Common)      - Finished
"route.exe"  print ...          (Common)      - Finished
"systeminfo.exe" ...            (Common)      - Finished
"msinfo32.exe"  /nfo "D:\Temp\..(Common)      - Finished
"trac.exe" "info" "-t" "20...   (EPC)         - Finished
"trac.exe" "printProxyConf...   (EPC)         - Finished
"wevtutil.exe" qe application ..(Full Disk En - Finished
"wevtutil.exe" qe system      ..(Full Disk En - Finished
"CpInfoPreboot.exe" "preboot" "D(Full Disk En - Finished
"DumpSMBios.exe" "D:\Temp\CPInfo(Full Disk En - Finished
"ListInstalledApps.exe" "D:\Temp(Full Disk En - Finished
"ListPartitions.exe" "D:\Temp\CP(Full Disk En - Finished



Compressing 47\579:  (PAC_1_Pol_CPEPS_SID10_ID_3bc19258-e079-4ad8-b116-a050262a4
... ... output was cut for brevity ... ...
Compressing 148\579:  (EPS_Check Point Endpoint Total Security x64_8.3.937_383_m
Deleting temporary files                      - Done

---------------------
Uploading Cab to Ftp:
---------------------

Starting to upload cab file named: cpinfo.admin.30_04_2014_16_35.cab
Upload progress 100%
File uploaded successfully

Finished Running CPInfo
Information is located at:
C:\Users\admin\CPInfo\cpinfo.admin.30_04_2014_16_35

The information includes the following cabinet files:
cpinfo.admin.30_04_2014_16_35.cab
                                              - Done

Press any key to exit


Note
: the Additional Information output file cpinfo.admin.xxx.cab is not related to the main CPInfo utility, but can be uploaded to Check Point cloud by using it.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment