Check Point CPAC-Falcon-10G-B Administration Manual
  1. Manuals
  2. Brands
  3. Check Point Manuals
  4. Network Hardware
  5. CPAC-Falcon-10G-B
  6. Administration manual
Check Point CPAC-Falcon-10G-B Administration Manual

Check Point CPAC-Falcon-10G-B Administration Manual

R80.20 falcon acceleration cards available for security appliances
Hide thumbs Also See for CPAC-Falcon-10G-B:
Table of Contents

Advertisement

Quick Links

Download this manual
11 May 2019
FALCON ACCELERATION
CARDS
R80.20
Administration Guide

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the CPAC-Falcon-10G-B and is the answer not in the manual?

Questions and answers

Related Manuals for Check Point CPAC-Falcon-10G-B

Summary of Contents for Check Point CPAC-Falcon-10G-B

  • Page 1 11 May 2019 FALCON ACCELERATION CARDS R80.20 Administration Guide...
  • Page 2 Check Point. While every precaution has been taken in the preparation of this book, Check Point assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice.

  • Page 3: Important Information

    Certifications For third party independent certification of Check Point products, see the Check Point Certifications page https://www.checkpoint.com/products-solutions/certified-check-point-solutions/. Check Point R80.20 for Falcon Acceleration Cards For more about this release, see sk116242 http://supportcontent.checkpoint.com/solutions?id=sk116242.

  • Page 4: Table Of Contents

    Important Information ....................3 Introduction ........................5 Supported Falcon Acceleration Cards and Security Appliances ........5 Falcon Acceleration Cards .................... 8 CPAC-Falcon-10G-B ....................9 CPAC-Falcon-40G-B ....................10 Initial Configuration ....................11 Configuring the Link Speed on the Falcon-10G Ports ..........12 Breakout Mode for the Falcon-40G Card ..............

  • Page 5: Introduction

    Introduction Introduction The Check Point Falcon Acceleration Cards provide a high performance, low-latency, flexible and scalable solution for Check Point 5900, 6800, 15000, and 23000 appliances. Falcon Acceleration Card is a dedicated network I/O card solution with an integrated Network Processor, which supports multiple connectivity options at 10 GbE (CPAC-Falcon-10G-B) and 40 GbE (CPAC-Falcon-40G-B).
  • Page 6 CPAC-TR-40LR-QSFP-10K • CPAC-TR-40SR-QSFP-BiDi Supported DAC cables: • Check Point DAC cables (CPAC-DAC-10G-... and CPAC-DAC-40G-...) are supported only for connection to Check Point Maestro Hyperscale Orchestrators. • Check Point DAC breakout cables 40G to 4x10G (CPAC-DAC-40/10G-...) are supported. Falcon Acceleration Cards Administration Guide R80.20...
  • Page 7 Supported Falcon Acceleration Cards and Security Appliances Additional interfaces the Gaia on the appliance shows: Number of Names of Acceleration additional additional Module interfaces interfaces <Slot#> <Slot#> -01, eth -02, Falcon-10G <Slot#> <Slot#> -03, and eth <Slot#> <Slot#> -01 and eth Falcon-40G Notes: Slot#...

  • Page 8: Falcon Acceleration Cards

    CPAC-Falcon-40G-B ..................... Initial Configuration ...................... Refer to this generic illustration when you install, remove, or replace Falcon Acceleration Cards in Check Point Security Appliances: Item Description Captive screws Dummy panel for the expansion slot Falcon Acceleration Cards Administration Guide R80.20...

  • Page 9: Cpac-Falcon-10G-B

    Falcon Acceleration Cards CPAC-Falcon-10G-B Item Component Description Port • Off - LAN link is not established Activity • Steady Green - LAN link is established • Blinking Green - LAN activity Link • Speed • Steady Amber - 1 Gbit/sec data rate is selected •...

  • Page 10: Cpac-Falcon-40G-B

    Falcon Acceleration Cards CPAC-Falcon-40G-B Item Component Description Port • Off - LAN link is not established Activity • Steady Green - LAN link is established • Blinking Green - LAN activity Link • Speed • Steady White - 40 Gbit/sec data rate is selected Falcon Acceleration Cards Administration Guide R80.20...

  • Page 11: Initial Configuration

    Falcon Acceleration Cards Initial Configuration Falcon Acceleration Cards Getting Started Guide See the https://sc1.checkpoint.com/documents/Falcon/EN/CP_R80.20_FalconAccelerationCards_Getting StartedGuide/html_frameset.htm. Falcon Acceleration Cards Administration Guide R80.20...

  • Page 12: Configuring The Link Speed On The Falcon-10G Ports

    Configuring the Link Speed on the Falcon-10G Ports Because of hardware limitations, you must take additional steps when you configure the link speed on the Falcon Acceleration Cards 10 GbE (CPAC-Falcon-10G-B). Configuring the Link Speed in Gaia Operating System: R80.20 Gaia Administration Guide See the https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_Gaia_Admin...
  • Page 13 Configuring the Link Speed on the Falcon-10G Ports • Configuration of the link speed on the Falcon-10G ports generates this warning in both Gaia Portal and Gaia Clish: Module and Warning Ports Slot# Falcon-10G Warning: Please note that the link speed of eth< >-01 and Slot# Link Speed...
  • Page 14 Configuring the Link Speed on the Falcon-10G Ports • The Falcon Acceleration Cards support only these ethtool https://linux.die.net/man/8/ethtool commands: Command Description Shows the basic link status. ethtool Slot# Port# eth< >-< > Shows network statistics. ethtool -S Slot# Port# eth< >-<...

  • Page 15: Breakout Mode For The Falcon-40G Card

    ................Introduction to the Breakout Mode The Check Point Falcon-40G-B acceleration card supports an optical breakout cable (also known as a "fanout", "splitter", or "octopus" cable). You can connect this cable to split a Multimode OM3 or OM4 MPO connector into four LC optical connectors.
  • Page 16 Breakout Mode for the Falcon-40G Card Breakout mode Interfaces in Gaia Enabled for both ports • <Slot#> -01 (works at 10 GbE) • <Slot#> -02 (works at 10 GbE) <Slot#> • -03 (works at 10 GbE) <Slot#> • -04 (works at 10 GbE) <Slot#>...
  • Page 17 Breakout Mode for the Falcon-40G Card Example 2 from Gaia Portal - Breakout mode is enabled for Port #2 only: Falcon Acceleration Cards Administration Guide R80.20...

  • Page 18: Configuring The Breakout Mode

    Breakout Mode for the Falcon-40G Card Configuring the Breakout Mode Important: • When you enable or disable the Breakout Mode on a port, you must treat the procedure as if you install or remove network interfaces on the appliance. Schedule a maintenance window. •...

  • Page 19: Configuration In Gaia Portal

    Breakout Mode for the Falcon-40G Card Configuration in Gaia Portal To enable the Breakout Mode on a port: Step Description Insert the supported Short Range transceiver (on page 28) into this port. Note - If you insert an invalid transceiver, Gaia OS shows a warning dialog. However, it does not prevent the configuration of the breakout mode.
  • Page 20 Breakout Mode for the Falcon-40G Card To disable the Breakout Mode on a port: Step Description With a web browser, connect to the Gaia Portal on the Security Appliance at: IP Address of Gaia Management Interface https://< > From the navigation tree, click Network Management > Network Interfaces. Slot# Slot# Select the applicable interface (eth<...

  • Page 21: Configuration In Gaia Clish

    Breakout Mode for the Falcon-40G Card Configuration in Gaia Clish Syntax: • To set the breakout mode: set interface eth<Slot#>-<Port#> breakout-mode 40G/full [force] breakout-mode 10G/full(breakout) [force] • To show the current breakout mode: show interface eth<Slot#>-<Port#> Parameters: Parameter Description Slot# Port Specifies the 40 GbE port on the Falcon-40G card.
  • Page 22 Breakout Mode for the Falcon-40G Card To enable the Breakout Mode on a port: Step Description Insert the supported Short Range transceiver (on page 28) into this port. Note - If you insert an invalid transceiver, Gaia OS shows a warning dialog. However, it does not prevent the configuration of the breakout mode.
  • Page 23 Breakout Mode for the Falcon-40G Card To disable the Breakout Mode on a port: Step Description Connect to the command on the Security Appliance. Log in to Gaia Clish. Examine the current state of the Breakout Mode on the applicable interface (on page 15): <Slot#>...
  • Page 24 Breakout Mode for the Falcon-40G Card Example output - Port #2 on the first card is in the breakout mode: MyAppliance> show configuration interface set interface Mgmt link-speed 1000M/full set interface Mgmt state on set interface Mgmt auto-negotiation on set interface Mgmt ipv4-address 172.19.184.183 mask-length 24 set interface Sync state off set interface eth1-01 comments "1st Falcon-40G - Port 1"...

  • Page 25: Configuration In Expert Mode

    Breakout Mode for the Falcon-40G Card Configuration in Expert Mode The xlp_port_config script queries and configures the Falcon-40G ports for the breakout mode. We recommended to use this script only when you are not able to use Gaia Portal or Gaia Clish to configure the breakout mode.
  • Page 26 Breakout Mode for the Falcon-40G Card Step Description Connect to the command on the Security Appliance. Log in to Expert mode. Examine the current state of the Breakout Mode: [Expert@MyAppliance:0]# xlp_port_config --display Configure the IP addresses on the applicable "child" interfaces. R80.20 Gaia Administration Guide See the https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_Gaia...
  • Page 27 Breakout Mode for the Falcon-40G Card To determine what slot number the acceleration card populates: Shell Commands Gaia Clish Run one of these commands: • show asset ac • fwaccel stat Expert mode Run one of these commands: • clish -c "show asset ac" •...

  • Page 28: Limitations In The Breakout Mode

    Breakout Mode for the Falcon-40G Card Limitations in the Breakout Mode • Only Check Point branded CPAC-TR-40SR-QSFP-300m 40 GbE SR transceivers are supported for the breakout functionality. • Only Short Range (SR) 10 GbE transceivers are supported on the peer device.

  • Page 29: Monitoring Falcon Acceleration Cards In Gaia Portal

    CHAPTE R 5 Monitoring Falcon Acceleration Cards in Gaia Portal In This Section: Viewing the Appliances with Installed Cards .............. Viewing the Network Interfaces on the Installed Cards ..........Viewing the Hardware Sensors on the Installed Cards ..........Viewing the Appliances with Installed Cards Step Description Connect with a web browser to the Gaia Portal on the Security Appliance.

  • Page 30: Viewing The Network Interfaces On The Installed Cards

    Monitoring Falcon Acceleration Cards in Gaia Portal Viewing the Network Interfaces on the Installed Cards Procedure 1 Step Description Connect with a web browser to the Gaia Portal on the Security Appliance. Log in. From the left tree, click Overview. Examine the Network Configuration widget.
  • Page 31 Monitoring Falcon Acceleration Cards in Gaia Portal Procedure 2 Item Description Connect with a web browser to the Gaia Portal on the Security Appliance. Log in. From the left tree, click Network Management > Network Interfaces. The names of the Network Interfaces on the acceleration cards contain (Accelerated). The type of the Network Interfaces on the acceleration cards is AC Ethernet.

  • Page 32: Viewing The Hardware Sensors On The Installed Cards

    Monitoring Falcon Acceleration Cards in Gaia Portal Viewing the Hardware Sensors on the Installed Cards Step Description Connect with a web browser to the Gaia Portal on the Security Appliance. Log in. From the left tree, click Maintenance > Hardware Health. The names of the Network Interfaces on the acceleration cards contain (Accelerated).

  • Page 33: Monitoring Falcon Acceleration Cards In Gaia Clish

    CHAPTE R 6 Monitoring Falcon Acceleration Cards in Gaia Clish In This Section: Viewing the Network Interface Type ................Viewing the Hardware Information on the Appliance ..........Viewing the Hardware Sensors on the Installed Cards ..........Viewing the Network Interface Type Step Description Connect to the command line on the Security Appliance.

  • Page 34: Viewing The Hardware Information On The Appliance

    For the accelerated interface in the Acceleration Bypass mode, the output shows Mode: AC Bypassed. Example 1 - Hardware information about the acceleration cards: MyAppliance> show asset ac AC Slot 1 Description: CPAC-falcon-10G-B AC Slot 1 Serial Number: XXXXXXXXXXXXX AC Slot 1 Memory: 8.00 GB AC Slot 1 Chip Version: XLP5XX Rev A1 AC Slot 1 Part Number: XXXXXXXXXXXXXXX-XX AC Slot 1 Hardware Revision: 03.20...
  • Page 35 Number of line cards: 2 Line card 1 type: 4 ports 10GbE Fiber Acceleration Card Line card 2 type: 4 ports 10GbE Fiber Acceleration Card AC Slot 1 Description: CPAC-falcon-10G-B AC Slot 1 Serial Number: XXXXXXXXXXXXX AC Slot 1 Memory: 8.00 GB...

  • Page 36: Viewing The Hardware Sensors On The Installed Cards

    Monitoring Falcon Acceleration Cards in Gaia Clish Viewing the Hardware Sensors on the Installed Cards Step Description Connect to the command line on the Security Appliance. Log in to Gaia Clish. Run one of these two commands to show the information from the hardware sensors: •...
  • Page 37 Monitoring Falcon Acceleration Cards in Gaia Clish Example 2 MyAppliance> cpstat -f sensors os Temperature Sensors -------------------------------------------------------- |Name |Value|Unit |Type |Status| -------------------------------------------------------- |CPU0 Temp |36.75|Celsius|Temperature| |Intake Temp |26.75|Celsius|Temperature| |Outlet Temp |16.25|Celsius|Temperature| |Falcon-1 10G NPU Temp|49.00|Celsius|Temperature| |Falcon-3 10G NPU Temp|46.00|Celsius|Temperature| -------------------------------------------------------- Fan Speed Sensors ------------------------------------------- |Name...

  • Page 38: Monitoring Falcon Acceleration Cards In The Expert Mode

    CHAPTE R 7 Monitoring Falcon Acceleration Cards in the Expert Mode In This Section: Viewing the Network Interface Type ................Viewing the Hardware Information on the Appliance ..........Viewing the Hardware Sensors on the Installed Cards ..........Viewing the Network Interface Type Step Description Connect to the command line on the Security Appliance.

  • Page 39: Viewing The Hardware Information On The Appliance

    = 1400000000 net:dev:adp:ipsctl:slot:1:hw:ddr_freq = 800000000 net:dev:adp:ipsctl:slot:1:hw:soc_freq = 800000000 net:dev:adp:ipsctl:slot:1:hw:nae_freq = 697000000 net:dev:adp:ipsctl:slot:1:hw:dpi_freq = 664000000 net:dev:adp:ipsctl:slot:1:hw:chip_vers = XLP5XX Rev A1 net:dev:adp:ipsctl:slot:1:hw:board_description = CPAC-falcon-10G-B net:dev:adp:ipsctl:slot:1:hw:board_part = XXXXXXXXXXXXXXX-XR net:dev:adp:ipsctl:slot:1:hw:board_serial = XXXXXXXXXXXXX net:dev:adp:ipsctl:slot:3:hw:edac:monitor_tmo = 3600 net:dev:adp:ipsctl:slot:3:hw:edac:correctable:l2 = 0 net:dev:adp:ipsctl:slot:3:hw:edac:correctable:l3 = 0 net:dev:adp:ipsctl:slot:3:hw:edac:correctable:dram = 0...
  • Page 40 = 0 net:dev:adp:ipsctl:slot:3:hw:ram_size = 7869235200 net:dev:adp:ipsctl:slot:3:hw:cpu_freq = 1400000000 net:dev:adp:ipsctl:slot:3:hw:ddr_freq = 800000000 net:dev:adp:ipsctl:slot:3:hw:soc_freq = 800000000 net:dev:adp:ipsctl:slot:3:hw:nae_freq = 697000000 net:dev:adp:ipsctl:slot:3:hw:dpi_freq = 664000000 net:dev:adp:ipsctl:slot:3:hw:chip_vers = XLP5XX Rev A1 net:dev:adp:ipsctl:slot:3:hw:board_description = CPAC-falcon-10G-B net:dev:adp:ipsctl:slot:3:hw:board_part = XXXXXXXXXXXXXXX-XR net:dev:adp:ipsctl:slot:3:hw:board_serial = XXXXXXXXXXXXX [Expert@MyAppliance:0]# Falcon Acceleration Cards Administration Guide R80.20...

  • Page 41: Viewing The Hardware Sensors On The Installed Cards

    Monitoring Falcon Acceleration Cards in the Expert Mode Viewing the Hardware Sensors on the Installed Cards Step Description Connect to the command line on the Security Appliance. Log in to the Expert mode. Run one of these two commands to show the information from the hardware sensors: •...

  • Page 42: Monitoring Falcon Acceleration Cards Over Snmp

    CHAPTE R 8 Monitoring Falcon Acceleration Cards over SNMP In This Section: List of SNMP OIDs for Throughput ................List of SNMP OIDs for Notifications................List of SNMP OIDs for Drops ..................List of SNMP OIDs for Interfaces ................. List of SNMP OIDs for Memory Utilization ..............

  • Page 43: List Of Snmp Oids For Notifications

    Monitoring Falcon Acceleration Cards over SNMP OID Name OID Number Description .1.3.6.1.4.1.2620.1.36.1.5.3.1.1.9 Number of concurrent fwSXLFalconsConcurrentCon connections. nections List of SNMP OIDs for Notifications The table below contains list of SNMP OIDs for the number of notifications sent between SecureXL Instances in Falcon Acceleration Cards and Firewall Instances in the Host Security Appliance.
  • Page 44 Monitoring Falcon Acceleration Cards over SNMP OID Name OID Number Description .1.3.6.1.4.1.2620.1.36.1.5.3.3.1.6 Number of packets fwSXLFalconsDropsHeavyLoa dropped due to a TCP dTcpViolation violation during a heavy load. .1.3.6.1.4.1.2620.1.36.1.5.3.3.1.7 Number of dropped fwSXLFalconsDropsCorruptP acket corrupted packets. .1.3.6.1.4.1.2620.1.36.1.5.3.3.1.8 Number of packets fwSXLFalconsDropsHeavyLoa dropped for new dNewConnection connections during a...

  • Page 45: List Of Snmp Oids For Interfaces

    Monitoring Falcon Acceleration Cards over SNMP OID Name OID Number Description .1.3.6.1.4.1.2620.1.36.1.5.3.3.1.19 Number of packets fwSXLFalconsDropsQxlDecis dropped due to the QXL decision. .1.3.6.1.4.1.2620.1.36.1.5.3.3.1.20 Number of packets fwSXLFalconsDropsLoopPrev ention dropped due to the traffic loop prevention. List of SNMP OIDs for Interfaces The table below contains list of SNMP OIDs for information about the Falcon Acceleration Card interfaces - name, speed, and state.

  • Page 46: List Of Snmp Oids For Memory Utilization

    Monitoring Falcon Acceleration Cards over SNMP OID Name OID Number Description .1.3.6.1.4.1.2620.1.36.1.5.3.4.1.15 Speed of SecureXL fwSXLFalconsInterface5Spe interface 5. .1.3.6.1.4.1.2620.1.36.1.5.3.4.1.16 Speed of SecureXL fwSXLFalconsInterface6Spe interface 6. .1.3.6.1.4.1.2620.1.36.1.5.3.4.1.17 Speed of SecureXL fwSXLFalconsInterface7Spe interface 7. .1.3.6.1.4.1.2620.1.36.1.5.3.4.1.18 State of SecureXL fwSXLFalconsInterface0Sta interface 0. .1.3.6.1.4.1.2620.1.36.1.5.3.4.1.19 State of SecureXL fwSXLFalconsInterface1Sta interface 1.

  • Page 47: List Of Snmp Oids For Cpu Utilization

    Monitoring Falcon Acceleration Cards over SNMP OID Name OID Number Description .1.3.6.1.4.1.2620.1.36.1.5.3.5.1.7 Free packet pool fwSXLFalconsPacketPoolFre memory. eMemory List of SNMP OIDs for CPU Utilization The table below contains list of SNMP OIDs for CPU utilization (%) in Falcon Acceleration Cards. Parent OID Name: fwSXLStatFalconsCpuTable Parent OID Number: .1.3.6.1.4.1.2620.1.36.1.5.3.6 OID Name...

  • Page 48: List Of Snmp Oids For General Information

    Monitoring Falcon Acceleration Cards over SNMP OID Name OID Number Description .1.3.6.1.4.1.2620.1.36.1.5.3.6.1.28 Utilization of CPU 26. fwSXLFalconsCpu26Usage .1.3.6.1.4.1.2620.1.36.1.5.3.6.1.29 Utilization of CPU 27. fwSXLFalconsCpu27Usage .1.3.6.1.4.1.2620.1.36.1.5.3.6.1.30 Utilization of CPU 28. fwSXLFalconsCpu28Usage .1.3.6.1.4.1.2620.1.36.1.5.3.6.1.31 Utilization of CPU 29. fwSXLFalconsCpu29Usage .1.3.6.1.4.1.2620.1.36.1.5.3.6.1.32 Utilization of CPU 30. fwSXLFalconsCpu30Usage .1.3.6.1.4.1.2620.1.36.1.5.3.6.1.33 Utilization of CPU 31.

  • Page 49: Additional Information About Falcon Acceleration Cards

    CHAPTE R 9 Additional Information about Falcon Acceleration Cards In This Section: The 'fwaccel stat' Command ..................The 'cpview' Command....................The 'adp_slots' and 'adp_ifs' Files ................Configuration and operation of the acceleration card is similar to other network interfaces. Below are some applicable commands to get additional information about the acceleration cards. The 'fwaccel stat' Command The fwaccel stat command shows the SecureXL status and the information about the installed Falcon Acceleration Cards.

  • Page 50: The 'Cpview' Command

    Additional Information about Falcon Acceleration Cards The 'cpview' Command CPview is an interactive a text based utility. It shows statistical data in real-time. For more information, see sk101878 http://supportcontent.checkpoint.com/solutions?id=sk101878. Step Description Connect to the command line on the Security Appliance. Log in to Gaia Clish or Expert mode.
  • Page 51 Additional Information about Falcon Acceleration Cards • Advanced > Network > Overview > Falcon-<Slot#> This section shows traffic statistics on the acceleration cards. • Advanced > SecureXL > applicable tabs These sections show SecureXL statistics for SecureXL Instances and the acceleration cards. •...

  • Page 52: The 'Adp_Slots' And 'Adp_Ifs' Files

    Additional Information about Falcon Acceleration Cards The 'adp_slots' and 'adp_ifs' Files File Description Examples from an appliance with two Falcon-10G cards [Expert@MyAppliance:0]# cat The /proc/adp/adp_slots file shows all /proc/adp/adp_slots acceleration cards in the appliance and their Slot 1 Accelerated current status (Accelerated or Bypassed). Slot 3 Accelerated [Expert@MyAppliance:0]#...

  • Page 53: Troubleshooting

    CHAPTE R 10 Troubleshooting In This Section: General Guidelines ....................... Log Files ........................Viewing the Performance Statistics ................Automatically Saving Messages from the Falcon Acceleration Cards ...... General Guidelines • Make sure the software loaded correctly. • Make sure the Falcon Acceleration Cards are active and work correctly. Log Files Location Description...

  • Page 54: Viewing The Performance Statistics

    Troubleshooting Viewing the Performance Statistics R80.20 Performance Tuning Administration For more information about the SecureXL, see the Guide https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_Performanc eTuning_AdminGuide/html_frameset.htm. Step Description Connect to the command line on the Host Security Appliance. Log in to the Expert mode. Run the applicable commands (see below). Best Practice - Collect the complete information before and after the issue: a) Collect the output before the issue: [Expert@HostName:0]# (echo "$(hostname) , $(/bin/date +"%b %d...
  • Page 55 Troubleshooting • pcie_xnp_tx_drop - Nexthop output on PCIe failure. • rx_v4_drop - IPv4 drops. • rx_v6_drop - IPv6 drops. • rx_vlan_drop - VLAN packets received on non-interface. To see the packets in Slow Path (F2F): ipsctl -a net:dev:adp:if:reasons Most important counters are: •...
  • Page 56 Troubleshooting To see the packet drops between the PCIe and the Host Security Appliance: ipsctl -a | egrep "no_jumbo_local|no_reg_local" Description of the counters: • no_reg_local - There is no receive (RX) buffer. • no_jumbo_local - There is no Jumbo receive buffer. To see the Deep Packet Inspection (DPI) drops: ipsctl -a | grep ':dpi:' | \ egrep...
  • Page 57 Troubleshooting To see the CoreXL Dispatcher statistics: fw ctl pstat -m Most important counters are: • Async ADP call - Asynchronous calls from acceleration cards. • Async index req - Index request for asynchronous calls. • Etm multik chain - QoS messages. •...

  • Page 58: Automatically Saving Messages From The Falcon Acceleration Cards

    Troubleshooting Automatically Saving Messages from the Falcon Acceleration Cards You can configure the Falcon Acceleration Cards to generate additional important messages automatically. In this case, you must configure the Host Security Appliance to save these messages automatically. The Host Security Appliance saves the messages in the Linux kernel ring buffer - dmesg. To control this feature, use these parameters on the Host Security Appliance: Parameter Value Description...
  • Page 59 Troubleshooting To enable the feature permanently on the Host Security Appliance (survives reboot): Step Description Connect to the command line on your Host Security Appliance. Log in to the Expert mode. Set the value of the Falcon Acceleration Cards logging parameter: a) Back up the current script: [Expert@MyAppliance:0]# cp -v /etc/rc.d/rc.local{,_BKP} b) Edit the current script:...
  • Page 60 Troubleshooting Step Description Print the contents of the current Linux kernel ring buffer. • To print the messages on the screen: [Expert@MyAppliance:0]# dmesg • To print the messages into a file: path filename [Expert@MyAppliance:0]# dmesg > /< >/< > Example: [Expert@MyAppliance:0]# dmesg >...

This manual is also suitable for:

Cpac-falcon-40g-b

Table of Contents