Collection of CheckMK checks (see https://checkmk.com/). All checks and plugins are provided as is. Absolutely no warranty. Send any comments to thl-cmk[at]outlook[dot]com

Skip to content
README.md 1.66 KiB
Newer Older
thl-cmk's avatar
thl-cmk committed
# RemoteAccess
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
 Monitors status of Check Point RemoteAccess VPN connections
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
---
### Check Info
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
* *service*: this check creates the service *Remote Access* on the Check Point gateway
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
* *state*:\
thl-cmk's avatar
thl-cmk committed
    **warning** if a RemoteAccess User with bad encryption (DES, 3DES, CAST, 3IDEA, NULL) is found\
    **warning/critical** if number of remote access users is above configured levels
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
* *wato*:
    * warning/critical level for number of remote access users
    * number of max. expected remote access users (used as max. for perfdata)
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
* *perfdata*: (all metrics are *count*)
thl-cmk's avatar
thl-cmk committed
    * RA users connected
thl-cmk's avatar
thl-cmk committed
    * RA users active
    * RA users destroy
    * RA users idle
    * RA users phase1
    * RA users down
    * RA users init
    * RA users with bad encryption
thl-cmk's avatar
thl-cmk committed
    * RA users with office mode
    * RA users with IKE over TCP
    * RA users with UDP encapsulation
    * RA users in visitor mode
thl-cmk's avatar
thl-cmk committed

---
### Download

* [checkpoint_remoteaccess.mkp (latest version)](https://thl-cmk.hopto.org/gitlab/checkmk/check-point/gateway/checkpoint_remoteaccess/-/raw/master/checkpoint_remoteaccess.mkp "Download latest version")

---                   
### Installation

You can install the package by uploading it to your CheckMK site and as site user run `mkp install checkpoint_remoteaccess.mkp`.


In the Enterprise/Free edition of CheckMK you can use the GUI to install the package (_Setup_ -> _Extension Packages_ -> _Upload package_)

---
### Want to contribute?

Nice ;-) Have a look at the [contribution guidelines](CONTRIBUTING.md "Contributing")

thl-cmk's avatar
thl-cmk committed
---
thl-cmk's avatar
thl-cmk committed
### Sample output
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
![sample output](/doc/sample.png?raw=true "sample output")
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
WATO options

![WATO options](/doc/wato.png?raw=true "WATO options")