The '
cpsizeme
' is a lightweight shell script that
produces a detailed performance report of Check Point Security Gateway.
This script measures the ongoing resource utilization on Security
Gateway during the given time period
. During this period, the script gathers information about CPU,
memory consumption, throughput and few other important performance
parameters.This '
cpsizeme
' output and report can assist in improving the sizing accuracy in any one of the following scenarios:- Replacing the current Security Gateway appliance/server with a new one.
- Future growth and planning ahead.
- Enabling more security Software Blades on the current Security Gateway.
- Troubleshoot performance issues on the Security Gateway
It is possible to upload the raw data to Check Point and e-mail the report at any time, even after running the script
Running the utility
You can choose the period of time to run the utility
here is the syntax for collecting data for two hours
cpsizeme 2h
Over the next 2 hours, the utility will collect performance data
from your appliance. It is recommended to run the utility on the
part of the week where you expect peak performance.
______________________________
After running this utility, 2 archive files are created:
1. Detailed archive file - includes all the collected raw performance data used
for analysis & statistics, including information such as connections and
routing tables with IP addresses. Used mainly by Check Point support staff.
2. Summary archive file - needed for generating a PDF document of the gateway
performance statistics of traffic, cpu, memory utilization and an XML file to
be used for appliance sizing. This archive does not include connection data
and IP addresses.
Note: Sharing your performance information with Check Point will help us to
improve our products.
Please choose:
1 Run the utility and automatically send both the detailed & summary
archives to Check Point
2 Run the utility and automatically send only the summary archive to
Check Point
3 Run the utility without sending the data automatically to Check Point
Your choice? [1]
press Enter to continue
Testing connection to Check Point...ok!
______________________________
* What is your email address? (this is required for receiving PDF via email,
email length should be shorter than 80 characters)? XXXX@domain
Any generated PDF report will be sent to 'XXXX@domain', is the email address correct (choosing 'n' will allow changing the email address) (y/n)? [y]
______________________________
Sharing some details about your organization will help us to
better analyze your report.
* Would you like to answer a few questions (y/n)? [y] n
Thank you for your input.
Loading service...
The background service was started at 2015-02-11 11:48:51 (Wednesday)
Data collection will finish at 2015-02-11 13:48:51 (Wednesday)
Data analysis may take an additional 1 hour.
Once done, data analysis will be available by:
/opt/CPsuite-R77/fw1/bin/cpsizeme -S
The report will be uploaded automatically to Check Point.
Uploading the data to CP
Once the utility has collected the data you can upload it to Checkpoint
/opt/CPsuite-R77/fw1/bin/cpsizeme -S
Please choose an option:
1 Show upload history
2 Show summary of last successful session
3 Show summary of gathered information
4 Show instructions to get sizing PDF report via email
5 Show location of generated files
6 Send summary & detailed archives to Check Point
7 Send summary archive to Check Point
8 Reanswer the utility's questions
9 Cleanup login notifications & optionally all related files
10 Exit
Your choice? 6
Send summary & detailed archives to Check Point
Uploading: ...
Uploading summary & detailed archives at 2015-02-11 14:02:19 (Wednesday) succeeded
Press enter key to continue...