Support Center > Search Results > SecureKnowledge Details
How to collect a CPinfo from the Endpoint Security Client Technical Level
Solution

Important Notes:

 

Collecting CPInfo from Client UI:
In order to collect CPinfo and log files on the Endpoint Security Client machine:

  1. Double-click on the client tray icon, or right-click and select Display Overview.
    For initial client refer to sk120138.
  2. In the Overview pane, click on Advanced. In the Logging section, click on the Collect button.
  3. Configure the client to collect the logs with the Extended detail level:
    1. On the 1st screen, press 'c' to configure:
      Check Point Log Collection Tool
      -------------------------------
      Current Configuration:
      
      Detail level.............. <General>
      Log files since........... <28/04/2014>
      Upload to Check Point..... <Enabled>
      
      Press 'c' to configure
      Press 'd' to disable upload to Check Point
      Press <Enter> to start
      Press 'q' to quit
      
    2. On the 2nd screen, press '1' to change the Detail level:
      Check Point Log Collection Tool Configuration
      ---------------------------------------------
      1) Detail level.............. <General>
      2) Log files since........... <28/04/2014>
      3) Upload to Check Point..... <Enabled>
      
      Choose setting [Press <Enter> to skip]: 1
      
    3. On the 3rd screen, press '3' to set the Extended level:
      Collection Detail Configuration
      -------------------------------
      
      Current detail level is <General>
      
      1) Basic    - Minimum amount of information
      2) General  - Most common information (Recommended)
      3) Extended - Maximum amount of information (May take longer to complete)
      
      
      Enter detail level [Press <Enter> to skip]: 3
      
    4. On the 4th screen, press 'Enter' to apply and start collecting the information:
      Check Point Log Collection Tool Configuration
      ---------------------------------------------
      1) Detail level.............. <Extended>
      2) Log files since........... <28/04/2014>
      3) Upload to Check Point..... <Enabled>
      
      Choose setting [Press <Enter> to skip]: 	Enter



    Collecting CPInfo from Endpoint Security Management:
    In order to collect CPinfo and log files on the Endpoint Security Management system:

    1. Go to the Infinity Portal.
    2. On the left pane, click on Push Operations
    3. On the upper toolbar, click on Add.
    4. An Add Push Operation window now appears. 
    5. Under Select Push Operation, select Agent Settings from the drop-down menu. 
    6. From the list, select Collect Client Logs, and click Next.
    7. Under Select Devices, select a particular computer and click Update Selection
    8. Select the computer you indicated, and click Next
    9. Under Log Set to Collect, select the desired amount of information from the drop-down menu.
    10. Under Debug Info Upload, select whether you would like to upload the reports to the Check Point servers, or to your corporate servers.
    11. Click Finish.
    12. CPinfo is also stored on the Endpoint Client in the following location:
      1. On x64 machines, when using a push operation, the file location is:
        C:\Windows\Syswow64\config\systemprofile\CPInfo
      2. On x86 machines, when using a push operation, the file location is:
        C:\Windows\System32\config\systemprofile\CPInfo
        For more detailed information, go to sk154793.

     Show / Hide complete output example

    --------------------
    Collection Information For Common:
    --------------------
    Composing file copy list (date filter off)    - Done
    Collecting registry entries                   - Done
    
    --------------------
    Collection Information For EPAM:
    --------------------
    Composing file copy list (date filter on)     - Done
    Composing file copy list (date filter off)    - Done
    Collecting files information                  - Done
    
    --------------------
    Collection Information For ClientUI:
    --------------------
    Composing file copy list (date filter off)    - Done
    
    --------------------
    Collection Information For Compliance:
    --------------------
    Composing file copy list (date filter off)    - Done
    Collecting files information                  - Done
    
    --------------------
    Collection Information For DA:
    --------------------
    Composing file copy list (date filter off)    - Done
    Collecting files information                  - Done
    
    --------------------
    Collection Information For Document Security:
    --------------------
    Composing file copy list (date filter off)    - Done
    Collecting files information                  - Done
    Collecting directory listing                  - Done
    
    --------------------
    Collection Information For EPC:
    --------------------
    Composing file copy list (date filter on)     - Done
    Composing file copy list (date filter off)    - Done
    Collecting registry entries                   - Done
    
    --------------------
    Collection Information For EPSInstaller:
    --------------------
    Composing file copy list (date filter on)     - Done
    Composing file copy list (date filter off)    - Done
    
    --------------------
    Collection Information For ME:
    --------------------
    Composing file copy list (date filter on)     - Done
    Composing file copy list (date filter off)    - Done
    Collecting files information                  - Done
    
    --------------------
    Collection Information For SA:
    --------------------
    Composing file copy list (date filter on)     - Done
    Composing file copy list (date filter off)    - Done
    Collecting files information                  - Done
    Collecting directory listing                  - Done
    Collecting registry entries                   - Done
    
    --------------------
    Collection Information For Full Disk Encryption:
    --------------------
    Composing file copy list (date filter on)     - Done
    Composing file copy list (date filter off)    - Done
    Collecting files information                  - Done
    Collecting registry entries                   - Done
    
    --------------------
    Collection Information For Watchdog:
    --------------------
    Composing file copy list (date filter off)    - Done
    
    --------------------
    Running Additional Procedures:
    --------------------
    "ipconfig.exe"  -all ...        (Common)      - Finished
    "netstat.exe"  -ano ...         (Common)      - Finished
    "route.exe"  print ...          (Common)      - Finished
    "systeminfo.exe" ...            (Common)      - Finished
    "msinfo32.exe"  /nfo "D:\Temp\..(Common)      - Finished
    "trac.exe" "info" "-t" "20...   (EPC)         - Finished
    "trac.exe" "printProxyConf...   (EPC)         - Finished
    "wevtutil.exe" qe application ..(Full Disk En - Finished
    "wevtutil.exe" qe system      ..(Full Disk En - Finished
    "CpInfoPreboot.exe" "preboot" "D(Full Disk En - Finished
    "DumpSMBios.exe" "D:\Temp\CPInfo(Full Disk En - Finished
    "ListInstalledApps.exe" "D:\Temp(Full Disk En - Finished
    "ListPartitions.exe" "D:\Temp\CP(Full Disk En - Finished
    
    
    Compressing 47\579:  (PAC_1_Pol_CPEPS_SID10_ID_3bc19258-e079-4ad8-b116-a050262a4
    ... ... output was cut for brevity ... ...
    Compressing 148\579:  (EPS_Check Point Endpoint Total Security x64_8.3.937_383_m
    Deleting temporary files                      - Done
    
    ---------------------
    Uploading Cab to Ftp:
    ---------------------
    
    Starting to upload cab file named: cpinfo.admin.30_04_2014_16_35.zip
    Upload progress 100%
    File uploaded successfully
    
    Finished Running CPInfo
    Information is located at:
    C:\Users\admin\CPInfo\cpinfo.admin.30_04_2014_16_35
    
    The information includes the following cabinet files:
    cpinfo.admin.30_04_2014_16_35.zip
                                                  - Done
    
    Press any key to exit
    


    Note
    : the Additional Information output file cpinfo.<username>.xxx.zip is not related to the main CPInfo utility, but can be uploaded to Check Point cloud by using it.


      Applies To:
      • sk169258 - How to Collect VPN logs from the Endpoint Security Client

      Give us Feedback
      Please rate this document
      [1=Worst,5=Best]
      Comment