Collection of CheckMK checks (see https://checkmk.com/). All checks and plugins are provided as is. Absolutely no warranty. Send any comments to thl-cmk[at]outlook[dot]com

Skip to content
README.md 1.22 KiB
Newer Older
thl-cmk's avatar
thl-cmk committed
# RemoteAccess [(Download the MKP package)](/../../../-/raw/master/checkpoint_remoteaccess.mkp "Download MKP package")

 **Note: this package is for CheckMK version 2.x. For other versions see the corresponding branch.**
thl-cmk's avatar
thl-cmk committed

Monitors status of Check Point RemoteAccess VPN connections

Check Info:

thl-cmk's avatar
thl-cmk committed
* *service*: this check creates the service *Remote Access* on the Check Point gateway
thl-cmk's avatar
thl-cmk committed
---
thl-cmk's avatar
thl-cmk committed
* *state*:\
thl-cmk's avatar
thl-cmk committed
    **warning** if a RemoteAccess User with bad encryption (DES, 3DES, CAST, 3IDEA, NULL) is found\
    **warning/critical** if number of remote access users is above configured levels
thl-cmk's avatar
thl-cmk committed
---
thl-cmk's avatar
thl-cmk committed
* *wato*:
    * warning/critical level for number of remote access users
    * number of max. expected remote access users (used as max. for perfdata)
thl-cmk's avatar
thl-cmk committed
---
thl-cmk's avatar
thl-cmk committed
* *perfdata*: (all metrics are *count*)
thl-cmk's avatar
thl-cmk committed
    * RA users connected
thl-cmk's avatar
thl-cmk committed
    * RA users active
    * RA users destroy
    * RA users idle
    * RA users phase1
    * RA users down
    * RA users init
    * RA users with bad encryption
thl-cmk's avatar
thl-cmk committed
    * RA users with office mode
    * RA users with IKE over TCP
    * RA users with UDP encapsulation
    * RA users in visitor mode
thl-cmk's avatar
thl-cmk committed
---
thl-cmk's avatar
thl-cmk committed
Sample output

thl-cmk's avatar
thl-cmk committed
![sample output](/doc/sample.png?raw=true "sample output")
thl-cmk's avatar
thl-cmk committed

thl-cmk's avatar
thl-cmk committed
WATO options

![WATO options](/doc/wato.png?raw=true "WATO options")