Support Center > Search Results > SecureKnowledge Details
Check Point Monitoring, Debug and Support Tools Technical Level

This article lists a variety of monitoring, debug and Support Tools. The below list will be updated each time a new tool will be introduced.

Table of Contents

  • Self-Updatable components
  • Configuration snapshot
  • Performance and monitoring
  • Appliances diagnostics and sizing
  • Software Installation Aids
  • Additional Tools / Features / Services


Self-Updatable components

Many components are built-in in Check Point software. Some of them can self-update if the user allows the Automatic Updates Download as described in sk94508.

Tool Name Description Link
AutoUpdater AutoUpdater is a Check Point process responsible for automatic updates. sk165653


Configuration snapshot

Tools for collecting and viewing of comprehensive machine configuration.

Tool Name Description Link
CPInfo CPInfo is a tool that collects diagnostics data on a customer's machine at the time of execution and uploads it to Check Point servers. This is the main Support tool for data collections and analysis. The tool also provides the ability to upload the output and any additional files to the Check Point FTP server in a secure way.
* Self-updatable if allowed. See sk94508
DiagnosticsView A Windows desktop tool that replaces InfoView application. DiagnosticsView offers a graphical representation of the CPInfo data.
* Self-updatable if allowed. See sk94508.


Performance and monitoring

Tools for monitoring and reporting of performance and resources utilization.

Tool Name Description Link
Skyline Skyline quickly and efficiently monitors your Check Point servers with industry-standard software and protocols (OpenTelemetry, Prometheus, and Grafana).
Skyline provides an OpenTelemetry CPView Agent service. The OpenTelemetry CPView Agent runs on a Check Point server to collect and exports health metrics from the Check Point CPView tool to an external location.
Performance Sizing Utility (cpsizeme) The 'cpsizeme' is a lightweight shell script that produces a detailed performance report of a Check Point Security Gateway. This script measures the ongoing resource utilization on a Security Gateway during the given time period. During this period, the script gathers information about CPU, memory consumption, throughput and a few other important performance parameters.
* Self-updatable if allowed. See sk94508.
Manage Partition Size with LVM Manager Modify partition volume in an easy and simplified way. This is for Gaia OS only at the moment. sk95566
FW Monitor A powerful built-in tool for capturing network traffic on Security Gateway. The 'FW Monitor' utility captures network packets at multiple capture points along the FireWall inspection chains. sk30583

CPMonitor Utility is targeted to analyze traffic captured by tcpdump / snoop / Check Point FW Monitor.

It parses the input traffic capture file and extracts valuable information from it, including:

  • Overall traffic statistics (pps, cps, concurrent, throughput)
  • Top connections, top servers and top services
  • Detailed connections, servers and services (with packet size distribution)
  • Per second analysis

CPView Utility is a text-based built-in utility (on Gaia OS and SecurePlatform OS) that can be run ('cpview' command) on Security Gateway / Security Management Server / Multi-Domain Security Management Server.

CPView Utility shows statistical data that contain both general system information (CPU, Memory, Disk space) and information for different Software Blades (only on Security Gateway). The data is continuously updated in easy to access views.

On Security Gateway, this statistical data can be used to monitor machine's performance.


Analysis of Connections Table (that was collected on Security Gateway) to optimize the rulebase - e.g., for SecureXL to accelerate more packets.

Note: This tool exists only for Windows OS.

CPPCAP 'CPPCAP' is a traffic capture tool which provides the most relevant outputs and is similar to Tcpdump. The tool is adjusted to Gaia operating system yet requires installation of an applicable RPM sk141412 
CPU Spike Detective The CPU Spike Detective is a tool that monitors the system CPU usage and checks for the spikes. This tool does not impact the device performance. sk166454
Top Connections Tool The Top Connections Tool unites all top connections from all CoreXL Firewall instances into one view.
With the Top Connections Tool, you filter the information by applicable CPU Core / CoreXL Firewall Instance / CPU Load, or export the information to an output file.
IKEView The IKEView utility is a Check Point tool created to assist in analysis of the ike.elg (IKEv1) and ikev2.xml files. sk30994
HealthCheck Point (HCP) A self-updatable suite of tools for:
  • Tests: Assesses the health of your system
  • WTS (What's The Story): Provides a timeline of critical and informative events occurred on the system
  • Topology: Visualize the Firewall topology


Appliances diagnostics and sizing

Tools for choosing and testing your Check Point Appliances hardware.

Tool Name Description Link
Hardware Diagnostics Tool Diagnose your Check Point Appliance for hardware issues. sk97251
Appliance Sizing Tool Helps choose the right appliance for your needs in order to meet your Security requirements (UserCenter - 'Quoting' menu - 'Appliance Sizing Tool'). Link
Health Check Perform an automated health check of the system. sk121447


Software Installation Aids

Tools for finding, installing and configuring the correct installation packages.

Tool Name Description Link
Upgrade Wizard Helps customers find the right installation package for smooth and seamless upgrade / fresh installation process. Link
CPUSE (Gaia Software Updates) Gaia Software Updates is an advanced and intuitive system for software deployment on Gaia-based systems. This is a new installation method, which allows to download and install software updates via the Gaia Portal or Gaia Clish. Gaia Software Updates support deployments of HotFixes, Upgrade packages and Fresh Install images.
* Self-updatable if allowed. See sk94508.
Central Deployment Tool (CDT) The Central Deployment Tool (CDT) is a utility that runs on an Security Management Server / Multi-Domain Security Management Server (running Gaia OS).
It allows the administrator to automatically install CPUSE Offline packages (Hotfixes, Jumbo Hotfix Accumulators (Bundles), Upgrade to a Minor Version, Upgrade to a Major Version) on multiple managed Security Gateways and Cluster Members at the same time.
The CDT uses CPUSE (Gaia Software Updates) Agents on the remote managed Security Gateways and Cluster Members to perform package installation. The CDT monitors and manages the entire process.
ISOmorphic Utility for making a bootable ISO to be used for a fresh installation of Check Point software. sk65205


Additional Tools / Features / Services

Tool Name Description Link
Sync with UserCenter Lets users synchronize certain information regarding their environment to UserCenter account.
The additional information that is presented in the UserCenter account enables:
  • Better inventory management
  • A pro-active support
  • Better and faster tickets resolution
License Status Collector tool The License Status Collector tool examines the applicable database on the Management Server for license issues.
If a problem is discovered, the tool fixes it or shows an applicable message with the required steps.
CheckMe - Instant Security Check This service allows simulating various attacks that can affect your computer and information on your network.
The summary report shows the possible vulnerabilities of your computer to Phishing / Malicious sites, Malware / Ransomware, and Data Leakage / Exfiltration.
PerfCollect tool For Troubleshooting performance impact on machine with Endpoint Security Client installed. Sometimes a user may experience performance impact on a machine with Endpoint Security Client installed. 
PerfCollect tool assists in troubleshooting the performance impact.

Give us Feedback
Please rate this document