Husband and father of two
Check Point wizard
Author of ccc (Changelog)
Changelog (ccc) → Hide
- 0.1Initial Release - Inspired by Moti Sagey's Top 3 Check Point CLI commands thread
- 0.2Added more commands
- 0.3Interactive Mode added by Marko Keca
- 0.4Added more commands, removed a bug with the 'View all commands' option, Interface Cleanups
- 0.5Added advanced interface summary developed in this thread
- 0.6Implemented enhancements as suggested by Günther W. Albrecht and Martin Heim, added SIC status check for gateways, general code cleanup
- 0.7Added more Security Management commands and CPU + memory statistics
- 0.8Added IPS/Threat Prevention 'Panic Button' as described in this presentation by Timothy Hall and a command suggested by Maarten Sjouw plus more MDS/VSX commands
- 0.9Implemented enhancements as suggested by Mikael Johnsson and Sven Glock, added commands to enable/disable SecureXL
- 1.0Colors added for better user experience, dropping for out-of-state packets can now be turned on/off thanks to Dameon Welch Abernathy's thread, IPS Update Time is now shown on R80.x systems thanks to Jerom van den Hoek's thread and many other little adjustments to make this a real 1.x release
- 1.1Added system info to Main Menu (props to: Rosemarie Rodriguez & Nathan Davieau for their Healthcheck script), started a Threat Emulation & Extraction section, improved command coloring
- 1.2Enhanced system info as suggested by Martin Heim, improved system information for cluster status
- 1.3Code improvements, replaced several sed with faster tr and cut commands, added more cluster info to Main Menu, corrected checking routines as suggested by Günther W. Albrecht
- 1.4Added Identity Awareness commands, ability to check the postfix email queue (sk114034), MDS additions as suggested by Maarten Sjouw and output optimizations as suggested by Sven Glock
- 1.5Changed interactive mode to support arrow keys for navigation, added usage information, general performance improvements via Bash's builtin parameter substitution, various fixes
- 1.6Added self-update functionality as requested by Vladimir Yakovlev in this thread, implemented more tests to avoid calls to non-existing ressources as mentioned by Günther W. Albrecht
- 1.7Fixed a nasty bug discovered by Aleksei Shelepov and Günther W. Albrecht
- 1.8Added commands to start/stop the ICA Management Tool, fixed a typo discovered by Ty King
- 1.9Added cpconfig and mdsconfig utilities, added ipassignment.conf integrity check, improved Multi-Core Performance Tuning commands
- 2.0Improved detection for supported OS as suggested by cciesec2006 at CPUG, added commands for CoreXL Dynamic Dispatcher and Firewall Priority Queue handling
- 2.1Added more details to system info (memory, CPU cores, CoreXL & SecureXL statistics), added migrate export command to Firewall Management section, improved several checks
- 2.2Fixed Firewall Management commands as suggested by Günther W. Albrecht
- 2.3Added more commands for mail handling tasks within Check Point Threat Emulation & code optimization as suggested by Maciej Maczka
- 2.4Added Threat Extraction Bypass commands as suggested by Niels van Sluis, added command to show calculated interface topology for easier address spoofing troubleshooting, general code and interface cleanup
- 2.5Added command to check the LOM of Check Point Appliances, improved Address Spoofing commands as suggested Norbert Bohusch
- 2.6Improved system information as suggested by Michael Asher, added VPN routing information as developed in Heiko Ankenbrand's thread
- 2.7Added IA command as suggested by Hans Hartung. Introduced a QoS Troubleshooting section and several code improvements as suggested by Alexander Wilke
- 2.8Improved system info (new: SMT, CPU Load, Multi-Queue Interfaces and Dynamic Dispatcher), added more performance tuning commands, minor script code fixes
- 2.9Added more system info (new: Policy, Blades), improved check for number of Multi-Queue interfaces, added Postfix queue message distribution commands as suggested by Benoit Verove
- 3.0Improved script starting time, added status dots to script starting routine, added Jumbo Hotfix take number and free RAM to system info
- 3.1Added performance troubleshooting commands (sar, iotop etc.), added check for licensed cores and OS edition to system info, fixed a parameter gone in R80.20 as mentioned by Günther W. Albrecht
- 3.2Added more details to system info as suggested by Rolf Peeters and Jozko Mrkvicka, improved script code, added user confirmation before executing commands
- 3.3Added Endpoint Management support, improved check for number of permitted cores as discussed in this thread
- 3.4Added more warning markup to system info, added core & crash dump checks, added commands to view and edit the malware policy on Threat Prevention gateways
- 3.5Fixed a syntax error spotted by Kaloyan Metodiev, improved crash dump location check, added max power script command
- 3.6Replaced a Non-Standard ASCII character spotted by Martin Heim, added red warning label to SecureXL and CoreXL when disabled, minor code improvements
- 3.7Added Timothy Hall's "Super Seven" performance assessment commands from this TechTalk session
- 3.8Added more commands to MDS Troubleshooting, fixed Multi-Domain Server OS string handling, improved error handling
- 3.9Revised the self-update mechanism to support user control, added more commands to Firewall Management and MDS Troubleshooting, minor code fixes
- 4.0Added support for t, f, g, h keys (when arrow keys don't work) as suggested by Vladimir Yakovlev
- 4.1Added blade update status, added Management server status as discussed in this thread, revised command to show VPN routes as suggested by Alexey B. in this post, added firewall inspection, address spoofing and IPS mode checks, added Geo Policy check as suggested in Timothy Hall's presentation
- 4.2Added disk usage check, fixed CoreXL check, grouped VPN routes by peer, improved cpvinfo syntax as suggested by Günther W. Albrecht
- 4.3Added API status and version to menu info, added check for Any host access, added commands for CPUSE Deployment Agent handling, fixed syntax for disk usage check
- 4.4Added more VPN commands, added Geo Policy One-liner from this thread, added VSX-capabilities as requested by Kaspars Zibarts in this thread, added checks for NTP sync status, SNMP version and GUI clients, added info for dynamic objects, general code improvements
- 4.5Added FW Monitor SuperTool, added more health checks for SmartCenter servers, secured self-update routine with https and SHA-512, general code improvements
- 4.6Added IPS profile name for gateways, TLS version check for GAiA portal (sk163542), OfficeMode IP view for connected VPN Remote Access users, watch command for fragmentation handling on gateways, general code improvements (RAM, QoS, last, R80.40 VPN Domain per Community)
- 4.7Added Maestro support with the help of Maarten Sjouw, integrated Remote Access VPN statistics One-liner from this thread, added PostgreSQL database size check (sk163235)
- 4.8Added more details to system info (CPU model, AES-NI flag, USFW support, Dynamic Split), improved RAID check, added abilitiy to run Gaia Health Check directly from ccc, added newest R80.30+/R80.40+ commands, upated the included one-liners
- 4.9Massive revision of the Maestro section, advanced the Cloud section, integration of my latest one-liners, replaced free with available RAM memory, added more health checks to the main menu, various general fixes and improvements, thanks to the entire Check Point CheckMates community for support
- 5.0Added ICA lapse check (sk158096);updated one-liner for address spoofing troubleshooting;added /etc/hosts check for gateways (sk42952);added Show VPN tunnels;added Maestro MHO transceiver & DAC inventory;optimized Maestro MHO advanced transceiver info & Gaia API status check; added Identity Collector service account stats & IOC feeds list to gateways;added overview of all centrally managed Check Point objects + Main IP; added Maestro one-lines to list transceivers, DAC cables and line cards, combined sar commands for SARChart use; added db_tool commands to show layers & rules on gateway;added LOM info to main menu; general main info improvements; added CME commands to cloud menu; added bonding and Multi-Versions Cluster (MVC) commands to the gateway section;added colors to licensing overview
- 5.1Added support for ElasticXL and R82