As a security administrator/engineer in your company, you have noticed that your HQ Check Point Security Management Server is not receiving logs from your HQ Check Point Gateway/Cluster. To…

The correct answer is C. fwd. fwd (FireWall Daemon) is the Check Point process running on the Gateway responsible for generating and forwarding logs to the Security Management Server - if logs aren't arriving, verifying fwd is your first diagnostic step on the gateway side. A (cpd) is wrong because cpd…

Troubleshoot R81.20 Security Gateway Issues

Question

As a security administrator/engineer in your company, you have noticed that your HQ Check Point Security Management Server is not receiving logs from your HQ Check Point Gateway/Cluster. To investigate this issue in the command line, you will need to verify which process is running?

Options

Acpd
Bfwm
Cfwd
Dcpm

How the community answered

(29 responses)

A
7% (2)
B
3% (1)
C
86% (25)
D
3% (1)

Explanation

fwd (FireWall Daemon) is the Check Point process running on the Gateway responsible for generating and forwarding logs to the Security Management Server - if logs aren't arriving, verifying fwd is your first diagnostic step on the gateway side.

A (cpd) is wrong because cpd handles SIC (Secure Internal Communication) heartbeats and daemon watchdog functions, not log forwarding.
B (fwm) is wrong because fwm runs on the Management Server, not the gateway, and handles policy fetch/install operations.
D (cpm) is wrong because cpm is the Check Point Management API/policy process, also on the Management Server side.

Memory tip: Think "fwd = forward logs" - the "fw" stands for firewall and the "d" is the daemon that delivers logs downstream to the management server. If logs aren't flowing, check fwd.

Topics

#Process Management#Log Collection#Gateway Troubleshooting#Firewall Daemon

Community Discussion

No community discussion yet for this question.

Full 156-587 Practice