Troubleshooting guide

Chapter 2 What To Send Technical Support High Availability
Advanced Technical Reference Guide 4.1 June 2000 130
High Availability
1. fw monitor file that is relevant for the problem.
2. fwinfo file from management and both modules.
3. sync.conf file on both sides.
4. Network topology.
5. Issue the command
fw tab –u –t connections > file
on both VPN-1/FireWall-1 machines at the same time (connections may be replaced by any other table that
should be synchronized but isn’t).
Send the files to support@ts.checkpoint.com.
Security Servers
Authentication
Gather the following information:
1. fwinfo file.
2. Error messages from the log and from the screen.
3. fw monitor file that is relevant for the problem.
4. Send the log/ahttpd.log file to support@ts.checkpoint.com.
5. If the problem is related to SMTP, ask for the spool directory and run the mail dequeuer and the asmtpd
in debug mode.
Send the files to support@ts.checkpoint.com.
Resources and CVP servers
Gather the following information:
1. fw monitor on port 18181.
2. fwopsec.conf file.
3. cvp.conf file on the CVP side.
4. Set the environment variable OPSEC_DEBUG_LEVEL to 3, and restart fwd. Send the output received in
fwd.log to support@ts.checkpoint.com.