> Source: [sk171436](https://support.checkpoint.com/results/sk/sk171436)
# sk171436 - HealthCheck Point (HCP) Release Updates
| Property | Value |
|----------|-------|
| Solution ID | sk171436 |
| Date Created | 2021-01-09 |
| Last Modified | 2026-08-09 |
| Technical Level | General |
| Products | Security Gateway, Security Management Server, Multi-Domain Security Management Server, Scalable Platforms |
| Versions | R82.10, R82, R81.20, R81.10 (EOS), R82.10, R82, R81.20, R82.10, R81 (EOS), R82.10, R82, R81.20, R81.10 (EOS), R81 (EOS), R81.10 (EOS), R81 (EOS), R81 (EOS), R81.10 (EOS), R81.20, R82 |
| OS | Gaia |
## Solution
Click Here to Show the Entire Article
**Introduction \| Availability \| List of Resolved Issues \| Known Limitations \| Manual Installation
Uninstall \| Tests \| What's The Story (WTS) \| Topology \| Usage**
Introduction {#Introduction}
----------------------------
**HealthCheck Point (HCP)** is a self-updatable suite of tools that helps you:
* **Tests**- Identify potential issues before they affect the system
* **WTS (What's The Story)**- Track critical and informational events with a clear timeline
* **Topology**- Understand your firewall topology at a glance
HealthCheck Point supports all Gaia versions starting from R80.10.
The HCP package is installed automatically on all relevant Check Point devices when Automatic Update downloads are enabled (see [sk175504](https://support.checkpoint.com/results/sk/sk175504), section 2-B).
If Automatic Updates are disabled, you must first manually install the latest [AutoUpdater](https://support.checkpoint.com/results/sk/sk165653) Take and then install the HCP package manually using the steps below, in the Manual Installation section.
Availability {#Availability}
----------------------------
> |---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------|---------|--------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------|
> | Product | Update | Take | Release Date | Download package |
> | * **Security Gateways** * **Maestro** * **Scalable Chassis** * **VSX Gateways** * **Management Servers** * **Multi-Domain Servers** * **Multi-Domain Log Servers** * **Log Servers** * **SmartEvent Servers** | Update 31 | Take 96 | 09 Aug 2026 | [](https://support.checkpoint.com/results/download/144784) (TAR) |
> | * **Security Gateways** * **Maestro** * **Scalable Chassis** * **VSX Gateways** * **Management Servers** * **Multi-Domain Servers** * **Multi-Domain Log Servers** * **Log Servers** * **SmartEvent Servers** | Update 31 | Take 96 | 09 Aug 2026 | [](https://support.checkpoint.com/results/download/144785)(TAR) For Check Point Firewall 3900 Appliances |
List of Resolved Issues and New Features per Update for HCP {#List of Resolved Issues}
--------------------------------------------------------------------------------------
Show / Hide this section
|-------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ID | Description |
| **Update 31 - Take 96 - Gradual deployment from 09 August 2026** ||
| ODU-4643 | Enhancement: The "Disk Space" test now drills down into full filesystems. It lists the largest files, shows how much space can be reclaimed from old logs, core dumps, and obsolete upgrade packages, and provides the exact cleanup commands. |
| HCP-1664 | Fixed false positives in the Gaia OS hardening tests: a recommended Jumbo Hotfix that is already installed, the Expert password hash algorithm check, LOM access monitoring, unreadable password-policy settings, and the factory-default admin Expert access configuration. The Expert password hash is also no longer displayed in the report. |
| HCP-1680 | Hardening test results no longer appear in the live run status on Scalable Platforms. |
| HCP-1681 | The "Scalable Platforms Distribution" test no longer counts "Not In Group" slots, fixing an incorrect per-site member count. |
| HCP-1462 | The "Connectivity to UC" test summary now shows the DNS servers used. |
| HCP-498 | The "Interface Errors" test now provides suggested solutions for tx_window_errors and tx/rx errors. |
| HEC-3281 | The "CPLD firmware" test no longer reports firmware as out of date when the running revision is newer than the packaged one. |
| HCP-1679 | Added a deprecation notice for Legacy Geo Protection. |
| ODU-4643 | Updated multiple tests: * The "VSNext WRP MAC" test now supports Same VMAC (SVMAC) mode and no longer raises false alerts caused by stale log entries. * The "Custom Applications RegEx" test now reports the correct status when no custom applications are defined. * The "System Stressed" test now reads CPU statistics correctly on Gateways running in UPPAK mode. * Improved the stability and reduced the size of the Licensing Status Collector. |
| **Update 30 - Take 95 - Gradual deployment from 19 July 2026** ||
| HCP-1667 | Enhancement: Added new automated HCP health checks, including consolidated "Gaia API Health" and "SNMP Health" tests. |
| HCP-1667 | Enhancement: Added a new "Image MD5 Consistency" test for Scalable Platforms. |
| HCP-1397 | Enhancement: Expanded the "IPMI Health test" to include LOM health checks and renamed it to "IPMI and LOM Health". |
| HCP-1078 | The Topology page now includes a redesigned layout, per-Virtual-System interface details, link state information, a details panel, focus mode, and IP address search. All interfaces are displayed correctly for improved visibility and navigation and icons were updated. |
| HCP-1676 | Fixed an issue where the aggregated Maestro/Scalable Platforms report could show success even when an individual member's test report showed a failure. |
| HCP-1674 | Improved the "Pattern Matcher Impact" test so that the suggested solution now includes the pattern-matcher statistics needed to act on it. |
| HCP-1672 | The "DNS Passive Learning" test no longer shows a misleading finding when untrusted DNS servers are present, and now displays its details in a collapsible table. |
| HCP-1664 | Aligned the Gaia OS hardening test names (LOM, System Logging) with those used on the Management side for consistency. |
| HCP-1651 | Fixed false positives in the Non-FQDN Objects test when object names are not unique. |
| HCP-1399 | HCP is now fully supported on ARM-based Gaia appliances. |
| HCP-528 | The "Features Compatibility" test on Scalable Platforms no longer fails incorrectly during upgrades. |
| HCP-1348, HCP-1308, HCP-839 | Fixed tracebacks and incorrect values in the Memory Usage test; user-space memory can no longer exceed 100% and is no longer double-counted on newer kernels. |
| HCP-922, HCP-758 | Fixed tracebacks in the File Descriptor and Software Version tests. |
| HCP-1153, HCP-952, HCP-931, HCP-699, HCP-701, HCP-680 | Applied text corrections across tests, charts, and report output. |
| HCP-1667 | Significantly reduced HCP startup time on systems with many Virtual Systems (up to \~9x faster). |
| HCP-1667 | The "Interface Errors" test now grades alerts by the error-to-packet ratio instead of absolute error counts. |
| HCP-1667 | The "Core Dumps" test now alerts only on a repeated crash of the same process within an hour, detects uncompressed core files, and reports non-critical terminated processes as informational. |
| HCP-1667 | The "Kernel Crash (vmcore)" test now grades findings by how recent and frequent the crashes are, and suggests removing old vmcore files to reclaim disk space. |
| HCP-1667 | Findings based on past log events are now graded by the age of the event across 19 tests, so old one-time events no longer raise alerts. |
| HCP-1667 | Fixed false positives in the Post Upgrade Verifier, ARP Cache Limit, Identity Awareness tables, and IoC Feeds tests. |
| HCP-1667 | The "Static Affinity" test no longer flags FWD helper child processes. |
| HCP-1667 | The "Geo Protection" test no longer raises an error when no geo-protection rule is configured. |
| HCP-1667 | The syslog-time, snapshot free-space, and custom-applications validation checks are now informational. |
| HCP-1667 | Long report tables are now collapsible in the report viewers. |
| **Update 29 - Take 94 - Gradual deployment from 28 June 2026** ||
| HCP-1664 FMW-9691 | Added new HCP tests that check Gaia OS security hardening settings. |
| HCP-1628 | Added a new "MDPS Status" HCP test (replacing the legacy TAC MDPS tests). |
| HCP-1653 | Added a new interactive terminal UI for browsing HCP reports and run history. |
| HCP-92 | Added the ability to send HCP reports by email, with recipient and SMTP settings configurable from the HCP UI. |
| HCP-1655 | The HCP report now includes an overall health score (0--100) per member and per Virtual System. |
| HCP-1659 | Improved performance and rendering of the charts in the HCP SmartConsole dashboard. |
| HEC-2997 | Fixed false positives in the Orchestrator config-redis sanity test. |
| HCP-1652 | The "Duplicate install_statuses" test no longer shows a warning caused by empty/blank entries. |
| HCP-1651 | Fixed an issue where objects with non-unique names could cause errors; HCP now identifies objects by UID. |
| HEC-2640 | Updated multiple tests: * The Memory test now uses graduated thresholds (info at 70%, warning at 80%, error at 90%) instead of a single error threshold. * The LACP Bond test no longer raises false errors from down slaves, downgrades LACP rate-speed mismatch from error to warning, and matches bond slaves by name instead of by order. * The Interface Errors test now also monitors dropped packets, and no longer raises a false alert on the first run after an upgrade. * The VSX Hardware Utilization test no longer raises a false warning for Virtual Systems whose policy is not fully installed. * The Hyperflow and Domains/DPL tests no longer display an informational result when the feature is simply not in use. * The "Connectivity to Cloud" test now also checks connectivity to the CWS service. |
| HCP-1659 | Fixed member-numbering display for a single Maestro site with 28 members. |
| **Update 28 - Take 93 - Gradual deployment from 17 May 2026** ||
| HCP-1643 | Enhancement: Added a new HCP test for RAD connectivity issues. |
| HCP-1650 | The "Shared Memory and Huge Pages" test shows an error for old events. |
| HCP-1297 | The Identity Awareness test may display a warning although the test passed. |
| HCP-1648 | The Interface Errors test triggers an error even when the interface error count is negligible. |
| HCP-1647 | HCP report incorrectly displays a warning for BIOS and power supply. |
| HCP-1646 | The Disk Space test may show an incorrect warning. |
| HCP-1645 | The "Duplicate install_statuses" tests may display a warning although there is no issue. |
| HCP-1641 | The "Status of unsaved changes Gaia Clish" test reports unsaved changes but there are no changes in the logs. |
| **Update 27 - Take 92 - Gradual deployment from 05 Apr 2026** ||
| HCP-1625 | Enhancement: The MTU test severity is changed to "Info". |
| HCP-1626 | Enhancement: Added a new HCP test to check CPdiag readiness. |
| HCP-1633 | HCP check fails with an exception "*undefined symbol: FwIsSDWAN*" in R81.20 and lower environments. |
| HCP-1156 | The Debug Flags test returns an error, although the test successfully completed. |
| **Update 26 - Take 91 - Gradual deployment from 01 Mar 2026** ||
| HEC-1347 | Enhancement: Added a new HCP test that analyzes load balancing and NAT utilization, and suggests optimal distribution adjustments accordingly. |
| HCP-1617 | Enhancement: This test validates LDAP server connectivity for Check Point's Identity Awareness feature. It parses the firewall's configuration files to discover all configured LDAP account units and their associated servers, then performs TCP connectivity tests to each server on the appropriate port based on SSL configuration (port 389 for standard LDAP or port 636 for LDAPS). |
| HCP-1614 | Enhancement: Added a new test that detects the presence of network loops on Maestro Scalable Platform Orchestrator site-sync ports. |
| HCP-1604 | Enhancement: Added a test to ensure bridge interfaces that are UP in the OS have their enabled state saved in the Gaia database, preventing them from starting as disabled after a reboot. |
| HCP-1603 | Enhancement: HCP spikes CPU test is modified to provide more valuable data. |
| HCP-1599 | Enhancement: Added the New System Status tab to the report. |
| HCP-1600 | Enhancement: Multi-Version Cluster test is now separated from the Post Upgrade test. |
| HCP-1407 | Enhancement: Added a new test to check NTP Servers configuration and functionality. |
| HCP-668 | Enhancement: Optimized and refactored the HCP charts. |
| HCP-1608 | Topology may not be presented in the report generated in the VSNext setup. |
| HCP-1598 | HCP incorrectly displayed a disk space error indicating 90% usage when only 21% was actually used. |
| HCP-1590 | "BGP graceful restart" returns a false positive error on setup with no BGP configured. |
| HCP-869 | Running an HCP check fails and raises an exception on machine with no policy installed. |
| HCP-623 | The VSX Hardware Utilization test fails and raises an exception. |
| **Update 25 - Take 88 (21 Oct 2025)** ||
| HCP-1505 | Enhancement: Added a new test to check if The Mirror and Decrypt Feature enabled may cause SKB leak. |
| HCP-1327 | A test ends with warning "*This test verifies that disk space usage is in the normal threshold for the network mounted filesystems*". |
| PMTR-105372 | The Configuration Synchronization test may fail with a false positive error. |
| HCP-1560 | HCP report timestamp is different from the prompt printed at the end of the execution. |
| **Update 24 - Take 86 (10 Sep 2025)** ||
| HCP-1528 | Enhancement: Bond test improvements. |
| HCP-1551 | Clock synchronization test fails with an exception on some appliances. |
| HCP-1327 | The test verifying that disk space usage is in the normal threshold on all file systems results with a warning. |
| HCP-1542 | Local Logging test for VS0 returns status "Error". |
| HCP-1514 | The "*hcp -r all*" test fails in a Security Group with an exception. |
| HCP-1062 | In the HCP Report in the HTML format, the Search field at the top left corner is not responsive. |
| **Update 23 - Take 85 (23 Jul 2025)** ||
| HCP-1536, HCP-1045 | Minor fixes. |
| **Update 22 - Take 84 (21 Apr 2025)** ||
| PMTR-109082 | Enhancement: Added a new test to verify licenses across all Scalable Platform members. |
| HCP-1361 | Enhancement: Added the option to upgrade HCP version on all the Security Gateways attached to the specific Security Management Server. |
| HCP-1109 | Enhancement: Added a new test to detect SAML Portal issues described in [sk182128](https://support.checkpoint.com/results/sk/sk182128). |
| AIOPS-1758 | Enhancement: Added a new test "hcp -r AIOps" for environments where the Infinity AIOps solution is activated. It provides additional diagnostic information and recommendations for Skyline configuration. |
| HCP-1291 | HCP test reports an FTW failure even when the FTW process is completed successfully. This happens because of incorrect checking the *.wizard_started* file. |
| HCP-1285 | The Memory test falsely reports high memory consumption of the JAVA process. |
| ODU-2483 | Minor fixes and improvements. |
| **Update 21 - Take 77 (05 Jan 2025)** ||
| HCP-1137 | Enhancement: Added a new test to verify successful execution of post-upgrade cleanup processes in the Security Group on a Scalable Platform. |
| ODU-2259 | Minor fixes and improvements. |
| **Update 20 - Take 76 (27 Oct 2024)** ||
| HCP-1082 | Enhancement: Increased the timeout threshold for background HCP processes in R82 to prevent false-positive errors while maintaining MHO's ability to handle concurrent REST requests. |
| **Update 19 - Take 74 (15 Sep 2024)** ||
| ODU-1979 | Minor fixes and improvements. |
| HCP-1000 | Enhancement: Improved the loading time of HCP tests in on a VSX Gateway. |
| HCP-982 | After an upgrade on Gaia, the SSD test may fail during system checks on hardware, although it does not have an SSD. |
| HCP-369 | The Cluster test false positively fails on a cluster with more than two members when they are in Backup state. |
| **Update 18 - Take 73 (03 Jul 2024)** ||
| HCP-1024 | High CPU and memory usage may be caused by the Licensing test. |
| HCP-1025 | Large output for the Shared Memory and Huge Pages test. |
| HCP-993 | It may not be possible to run HCP from SmartConsole for Secondary Management and SmartEvent Server. |
| HCP-1005 | The status for the Policy in Security Group test may be "UNDEFINED". |
| HCP-998 | HCP reports connectivity issue for the Virtual Switch that cannot access the Internet according to its configuration. |
| HCP-983 | The Software Version test fails as false positive on HOTFIX_OTLP_GA packages. |
| **Update 17 - Take 70 (31 March 2024)** ||
| HCP-894 | **NEW:** The HCP tests and the collection of reports to the Security Management Server are scheduled to occur automatically every 6 hours. This frequency can be modified by using the "*cpd_sched_config* " command in the *HcpPeriodicRun* task. |
| HCP-918 | The Connectivity to UserCenter test fails with "*IndexError: list index out of range*". |
| **Update 16 - Take 68 (29 February 2024)** ||
| HCP-896 | **NEW:** Added IOC statistics test, which reports if there is an IOC issue. |
| HCP-891 | The Jumbo Frames test fails with a false positive result after Jumbo Hotfix Accumulator installation. |
| HCP-900 | The "*hcp -r all*" command fails with a traceback stack on SDWAN test. |
| HCP-883 | HCP report may not be generated correctly if the object name has capital letters. |
| HCP-828 | The Fragmentation Rate test fails with an exception on one of the Scalable Platforms members. |
| **Update 15 - Take 67 (18 January 2024)** ||
| HCP-870 | **NEW:** Added a new test which validates that graceful restart is enabled on all BGP peers. |
| HCP-808 | **NEW:** Added a new test which checks if DNS Passive Learning feature is active. If it is not active, the test provides the exact reason. Refer to [sk161612](https://support.checkpoint.com/results/sk/sk161612). |
| HCP-792 | **NEW:** Added a new Identity Awareness test, which identifies any disconnections that may occur between the PDP and PEP components. |
| HCP-823 | **NEW:** Added new SD-WAN tests: SD-WAN - CPSDWAN and Steering Status: This test checks whether cpsdwan and steering are enabled. If any of these services are not enabled, the test fails; otherwise, it succeeds. SD-WAN - Services Running: This test ensures that all SD-WAN services are currently running. If any service is not running, the test fails; otherwise, it succeeds. SD-WAN - Fog Connection: This test checks the connectivity between the Security Gateway and the fog through the SD-WAN Nano-Agent. The test fails if there is no connection; otherwise, it succeeds. SD-WAN - ISP Redundancy Status: This test determines whether ISP Redundancy is enabled. The test fails if ISP Redundancy is detected, and it succeeds otherwise. SD-WAN - PBR Rules Configuration: This test examines the configuration of Policy-Based Routing (PBR) rules. It passes with a warning if at least one PBR rule is configured; otherwise, it succeeds. SD-WAN - Required Files Presence: This test checks the existence of all required SD-WAN files. If any file is missing, the test fails; otherwise, it succeeds. SD-WAN - Software Blades Enabled: This test ensures that all Software Blades necessary for SD-WAN functionality are enabled. If any required Software Blade is disabled, the test fails; otherwise, it succeeds. |
| HCP-815 | **NEW:** Created a new test to monitor hide NAT port usage, specifically designed to detect instances of failure resulting from port exhaustion. |
| - | The "hcp -r all" command fails on Security Group Members (Maestro or Scalable Chassis). Refer to [sk181865](https://support.checkpoint.com/results/sk/sk181865). |
| **Update 14 - Take 62 (15 October 2023)** ||
| HCP-790 | **NEW:** Added a new HTTPS Inspection configuration test, which checks the validity of the outbound inspection certificate for a Security Gateway. |
| HCP-753 | **NEW:** Added a new Local Ports Usage test, which checks ephemeral port range exhaustion for connections from Security Gateway interface addresses. |
| HCP-744 | **NEW:** Added a new test to check the current status of Dynamic Dispatcher. |
| HCP-742 | **NEW:** Added a new SecureXL test, which checks the configuration of LightSpeed appliances. |
| HCP-769 | **NEW:** Added a new test to check the quantity of Global connection entries. It should be less than four times of Concurrent connections values. |
| HCP-645 | **NEW:** A new test was added to verify that the Security appliances are correctly connected to the Orchestrators: * An orchestrator with an odd member ID should be plugged into an odd Security Appliance's NIC port. * An orchestrator with an even member ID should be plugged into an even Security Appliance's NIC port. For example: *ethsBP1-01 to Orchestrator X_1* *ethsBP1-02 to Orchestrator X_2* If the Security Appliances are not plugged in correctly, the HCP will provide the user with instructions on how to do so. |
| HCP-641 | **NEW:** A new test was added to verify if the hardware can recognize the ASIC. If the Orchestrator goes beyond the temperature limit, it triggers an automatic shutdown of the electricity supply to the ASIC to safeguard it. If this happens, the HCP will prompt the user to unplug and plug back the corresponding Orchestrators to restore the electricity flow to the ASIC. |
| HCP-779 | **NEW:** Added new IoT Protect tests for verification of IoT pre-requisites/onboarding, IoT discovery and IoT enforcement flows. |
| **Update 13 - Take 61 (17 July 2023)** ||
| HCP-670 | **NEW:** Added a new CoreXL Affinity test, it checks that affinity configuration does not link any fw instance to all CPUs. |
| HCP-731 | **UPDATE:** * On Scalable Platforms, HCP will now run on all members by default. * The "*-L*" flag is added to run on a local member only. |
| HCP-689 | **UPDATE:** The Bond Health test is enhanced to cover the slaves actor "*system mac address*". |
| HCP-666 | **UPDATE:** Added the CPU *io/sys/usr* charts. |
| HCP-597 | **UPDATE:** Reduced the Performance section tests runtime. |
| HCP-633 | **NEW:** Added a new test, which checks the IFI process status. |
| HCP-729 | On R80.20SP, during the CPView tests, HCP may get stuck. |
| HCP-720 | The CoreXL test on VSX has a false positive failure. |
| HCP-598 | WebUI may become unresponsive after running the User Space Processes Affinity Check test. |
| HCP-718 | The multi-queue test is passed in User Space Mode (UPPAK), even if the traffic is not balanced among interfaces, although it should not. |
| HCP-710 | When VMAC mode is used with an interface running the i40e driver and the "*disable-source-pruning*" flag on the interface is off, traffic may disappear and cause arp issues. |
| HCP-717 | The Updatable Objects test fails with an exception when *dnd_loader_state.C* does not exist. |
| HCP-715 | The MTU test fails with an exception if one SSM is detached from Scalable Chassis. |
| HCP-688 | The Memory test fails with an exception when running it simultaneously in different remote sessions. |
| HCP-683 | HCP fails to run with "*-m all*" flag when one of the Scalable Platform members is not in Active state. |
| HCP-676 | The MTU test fails on Magg if MTU is less than 1500. |
| HCP-667 | HCP fails on Scalable Platforms with an exception when running with the "*-m*" flag while some members are not active. |
| HCP-663 | The *fwkern.conf* test reports inconsistency between kernel and config value for SIM parameters. |
| HCP-644 | The Daemons test may not verify all the daemons. |
| HCP-643 | The Static Affinity test may fail when there is more than one FWD process. |
| HCP-635 | The VSX Database test may fail on VSW (Virtual Switch). |
| HCP-631 | The SSD Smart Health test fails on NVMe SSD. |
| HCP-618 | There is no connectivity between User Center and the Multi-Domain Security Server if proxy is configured in Clish. |
| **Update 12 - Take 59 (1 March 2023)** ||
| HCP-475 | **NEW:** It is now possible to schedule a cron job on Security Management Server, which sets HCP to run and collect the reports from all connected Security Gateways. To do so, run in Gaia Clish on the Management Server: *"add cron job HCP_night_run command 'bash -l /etc/hcp/source/cron/cron_hcp_collect_reports.sh' recurrence daily time HH:MM"* To change job name and recurrence, use regular "*set/show cron*" commands. |
| HCP-570 | **NEW:** Added a test to verify the integrity of VSX configuration in Gaia database. |
| HCP-575 | **NEW:** Added the "*hcp --run-on-remote \*" command which allows to run HCP on a remote Security Gateway from the Security Management Server shell. |
| HCP-130 | **NEW:** The License Verification tool is integrated into HCP. To enable the tool, follow the steps in [sk180447](https://support.checkpoint.com/results/sk/sk180447). |
| HCP-279 | **UPDATE:** The Bond Health test is enhanced with LACP state verification. |
| HCP-550 | **UPDATE:** Added the "Timestamp" column to the Pattern Match (PM) spikes table in the Pattern Matcher Impact Test. |
| HCP-615 | **UPDATE:** * Added the Syslog Timestamp test. * The "Verify log messages" timestamp is now compliant with the system time. |
| HCP-627 | **UPDATE:** Added Hardware Compatibility notifications. Refer to [sk180572](https://support.checkpoint.com/results/sk/sk180572). |
| HCP-613 | The Software Version test fails because of inconsistency of *HOTFIX_CHARON_HF* between Scalable Platforms members. |
| HCP-584 | The Protections Impact test may cause the "*RecursionError*" exception. |
| HCP-604 | The *httpd-ssl.conf.templ* file is corrupted after an upgrade. |
| HCP-622 | HCP may be inconsistent and fail with an exception when running it on Scalable Platforms members with the "*-m*" flag. |
| HCP-587 | HCP running on Security Management Server fails to get the last report from the Secondary Security Management Server or from the Log Server. |
| HCP-544 | The Interface Errors test may fail with an exception. |
| **Update 11 - Take 58 (18 Sep 2022)** ||
| HCP-6 | **NEW:** Added a test that checks if tables reached their limits. |
| HCP-510 | **NEW:** Added the "--domain" option to collect reports for a single domain. |
| HCP-531 | **NEW:** Added the Feature compatibility - VSX test. |
| HCP-530 | **NEW:** Added the "*snmp configuration*" option for the Feature compatibility - VSX test. |
| HCP-517 | Updated the Feature Compatibility test. |
| HCP-499 | SmartConsole may not provide the HCP report for a cluster member object. |
| HCP-504 | The URL Filtering test may fail with an exception. |
| HCP-500 | The VSX Hardware Utilization test may fail with an exception. |
| HCP-502 | Improved the SSD Health test. |
| HCP-511 | The ICA test may fail false positive on a Multi-Domain Log Module (MLM). |
| HCP-518 | The Distribution test may incorrectly pass if the "*dxl stat*" command failed. |
| HCP-522 | The Templates Efficiency test may fail with an exception. |
| HCP-543 | The MTU test may fail with an exception in an MDPS environment. |
| **Update 10 - Take 57 (20 Jun 2022)** ||
| HCP-66 | **NEW:** Added a test that checks whether the hardware is utilized efficiently. |
| HCP-264 | **NEW:** Added a test to verify the SSD SMART health. |
| HCP-72 | **UPDATE:** Added a section in the report which displays installed software versions. |
| HCP-460 | **UPDATE:** The Local Logging Monitor Test will now check for failures in the past. |
| HCP-462 | **UPDATE:** * Major improvement in test loading time on VSX systems. * Changed the "*hcp -l*" output table. It will now display all tests except the tests disabled in configuration. |
| HCP-431 | The "*Failed creating HTML report*" error is displayed after running HCP. |
| HCP-433 | The output table of the Scalable Platforms Features Compatibility Test is broken. |
| HCP-440 | Running the "*hcp -v*" command in the VS context does not show the HCP Take number. |
| HCP-441 | Running the "*hcp --show-last-full*" command in the non-VS0 Virtual System context may fail with an error message. |
| HCP-442 | The Software Provision Test incorrectly reports about missing AUTOUPDATER packages on some members. |
| HCP-443 | The MSG VLAN Consistency Test may fail with an exception. |
| HCP-450 | The MTU test may fail with an exception related to some bridge interfaces. |
| HCP-457 | The HCP Section icon in the report is not updated correctly. |
| HCP-464 | Virtual System interfaces may be missing in the topology tab of a generated report. |
| HCP-466 | Some tests may be shown in the status "Skipped", when running the "*hcp --show-last"* " command with the "*only-failed*" flag. |
| HCP-471 | HCP SmartConsole Extension cannot fetch the VSX Cluster report. |
| HCP-458 | HCP SmartConsole Extension cannot fetch the Log Server report. |
| **Update 9 - Take 55 (30 May 2022)** ||
| HCP-415 | **UPDATE:** Protections Impact test now collects real time PM statistics, and matches protections with the same LSS as the critical protections. |
| HCP-295 | The Connection Distribution test may collect distribution statistics from a wrong source because of a CPView issue. |
| HCP-375 | Arrows in the Topology tab may be missing. |
| HCP-404 | WTS may not show any cluster state event. |
| HCP-423 | MDPS is listed as an unsupported version. |
| HCP-426 | The Static Affinity Test may fail with an exception. |
| HCP-427 | The Memory Usage Test may show an abnormally large command. |
| HCP-428 | Loading an HTML page with the Maestro Orchestrator report may fail. |
| HCP-453 | The Dynamic Objects Database Test may be executed on the Maestro Hyperscale Orchestrator (MHO) and the Management Servers although it should not. |
| **Update 8 - Take 52 (07 Mar 2022)** ||
| HCP-332 | **NEW:** The "*hcp -r all*" report will now automatically include topology, WTS, and charts, no additional flags are needed. |
| HCP-374 | **NEW:** Added new flags to modify HCP default behavior. Some tests or products can be disabled/enabled: * --disable-test * --enable-test * --disable-test-file * --enable-test-file * --disable-product * --enable-product * --show-disabled-tests * --set-performance-impact Note: The "performance-impact" configuration will persist after running the command. |
| HCP-164 | **NEW:** Added a new test to check if any debug flags are enabled. |
| HCP-237 | **NEW:** Added an optional flag "*--only-failed* " for "*--show-last-full* " and "*--show-last*" to represent only tests with a status not equal to "Passed". |
| SWSCFG-132 | **NEW**: Added an HCP test to validate if interface errors are present. If any errors are detected, possible solutions will be provided based on the error type. |
| HCP-225 | **UPDATE:** The "*hcp -l*" command output is now displayed as a table. |
| HCP-378 | **UPDATE:** The "*hcp -l* " and "*hcp -r*" commands will now load the test faster. |
| HCP-87 | There may be a wrong timestamp in the report. |
| HCP-167 | Added verifications of *fwkern.conf* file according to [sk149412](https://support.checkpoint.com/results/sk/sk149412). |
| HCP-218 | The user cannot open the HCP report of the Management Server from SmartConsole because of the wrong UID in the report file. |
| HCP-328 | The FW Configuration File Sanity test may fail on valid parameters. |
| HCP-240 | The "*hcp --show-last-full*" command takes several minutes to represent very large reports. |
| HCP-333 | The WTS report is not generated correctly, a "*Failed to generate WTS report*" message is displayed. |
| HCP-343 | When running HCP with the -f flag, a JSON encode/decode error is shown. |
| HCP-345 | The "*hcp --ext-update-reports \*" command may fail with an exception. |
| HCP-368 | The IDA Sharing Mechanism test may fail with an exception. |
| HCP-370 | The "*hcp --ext-update-reports all*" command collects reports only from the first 50 Gateways. |
| HCP-373 | The SecureXL Status test may fail with an exception. |
| HCP-377 | *Autoupdatercli* fails to install HCP on R80.20 Scalable Platforms. |
| HCP-380 | The Core Dumps test may fail with an exception. |
| **Update 7 - Take 49 (17 Jan 2022)** ||
| HCP-260 | **NEW:** Added a test to validate Software Provision across Scalable Platforms cluster members. |
| HCP-291 | **NEW:** Added HCP version and Take number to the HCP report. |
| HCP-324 | **NEW:** Threat Prevention Heavy Connections test now shows 10 most loaded connections and connections load per instance. |
| HCP-325, HCP-187 | **NEW:** Added 2 new tables to the Memory Usage test: * user space consumption per virtual system * total consumption per process (aggregated by name) |
| HCP-219 | **NEW:** Added a test to check if the ICA certificate expires in less than a year/already expired. Refer to [sk158096](https://support.checkpoint.com/results/sk/sk158096). |
| HCP-318 | **UPDATE:** The Processes Memory test was removed. It is now part of the Memory Usage test. |
| HCP-292 | Transceiver EEPROM data may cause an exception in HCP test. |
| HCP-297 | In some scenarios, in a Scalable Platforms VSX environment, HCP may show an exception on test with Global Result option enabled. |
| HCP-299 | Cluster members may appear twice in the test result. |
| HCP-303 | Some zombie processes may not be detected by HCP test. |
| HCP-307 | The SIC test output appears twice in the test result. |
| HCP-308 | The CPView test may fail with an exception. |
| HCP-314 | The Topology graph may fail to generate on systems with numbers or a dot (.) in the name. |
| HCP-317 | The Transceiver test may fail with an exception. |
| HCP-342 | The IDA Tables Mismatch test may fail with an exception. |
| **Update 6 - Take 48 (9 November 2021)** ||
| HCP-210 | **NEW:** Added to the Dmesg Errors test to handle the "*stalls on CPU*" messages. |
| HCP-209 | **NEW:** Added the Bond Health test which validates that there are no slaves with different aggregator id under the same bond. |
| HCP-211 | **NEW:** Added ports link integrity test for Maestro Orchestrator. |
| HCP-160 | **UPDATE:** An error message will be displayed when trying to view report for the Security Management Server if the last report does not exist on the Security Gateway. |
| HCP-61 | On VSX systems, the Topology graph of HCP report either does not display or shows incorrect information. |
| HCP-230 | In some scenarios, the IDA Tables Limit test takes more than 5 seconds to run. |
| HCP-206 | In some scenarios, the SecureXL Status test shows status \[*EXCEPTION*\]. |
| HCP-224 | In some scenarios, the SIC test may be skipped the Security Gateway connected to a Multi-Domain Management Server. |
| HCP-223 | The "*hcp --ext-update-reports all*" command is not working properly on Multi-Domain Management environment. |
| HCP-208 | The "FW Configuration File Sanity" report raises exception on some appliances like 16600t. |
| HCP-214 | HCP "Core Dumps" may crash if there are broken headers in core dump archive. |
| HCP-207 | The Feature Compatibility test may fail when "*smo image auto-clone*" is enabled. |
| HCP-205 | In some scenarios, SmartConsole fails to open reports from the Management machine. |
| **Update 5 - Take 46 (20 October 2021)** ||
| HCP-151 | **NEW:** Added perf reports summary table to the CPU spikes performance test (listing top functions and processes during latest spikes). |
| HCP-158 | **NEW:** Added HCP test to verify the IPv4 forwarding flag on FireWall interfaces. |
| HCP-106 | **NEW:** Added HCP test to verify MTU values on FireWall interfaces. |
| HCP-30 | **NEW:** Added basic filters and date navigation to What's The Story. |
| HCP-153 | **NEW:** * Added hostname and date to the report file name * Added purge ability to delete old reports (archive are saved up to 10, and last reports the last one only). |
| HCP-198 | **NEW:** Added new Threat Prevention Heavy Connections test. |
| HCP-192 | **NEW:**Added new Threat Prevention tests to automate and improve the investigation of Threat Prevention performance issues. |
| HCP-202 | **NEW:** Added the Threat Prevention protections impact test. |
| HCP-163 | **NEW:** Added 3 new tests to the HCP tool: 1. "IDA tables instances mismatch" - To check the number of mismatches between Identity Awareness kernel tables instances. 2. "IDA tables limit" - For each Identity Awareness kernel table, to make sure the peak value is approaching the limit. 3. "IDA tables mismatch" - To check the number of mismatches between Identity Awareness kernel tables. |
| HCP-193 | In some scenarios, the connectivity to User Center may fail. |
| HCP-50 | Improved the loading time of What's The Story events. |
| HCP-107 | Local Logging test may fail even when remote logging setup is configured correctly. |
| HCP-166 | The *hcp.elg* log file may show exceptions on some tests even if they did not run on the environment. |
| HCP-149 | Typo in the Transceivers test. |
| HCP-38 | When running HCP with custom VS "-c" flag, the VS number is displayed incorrectly in SmartConsole report. |
| HCP-162 | HCP does not display a message when What's The Story does not contain events. |
| HCP-150 | In some scenarios, the File Descriptors test fails with exception. |
| HCP-168 | In some scenarios, after running HCP fails with error related to cpdiag stats. |
| HCP-188 | Disabled WTS (What's The Story) and Topology when the specific test runs, unless specifically indicated that it should run WTS / Topology. |
| **Update 3 - Take 44 (13 June 2021)** ||
| HCP-24 | **NEW:** Added timestamp to HTML report. |
| HCP-16 | **NEW:**Added the Transceiver Verifier test that checks that transceivers attached to appliances interfaces are supported. |
| HCP-82 | **NEW:** Added a new CSV file to allow CPDiag to collect statistics for: * Number of times the HCP ran in this environment * Passed tests * Failed tests * Tests score |
| HCP-67 | **NEW:** Added a new test to examine the SIC status between Security Management and Security Gateway. |
| HCP-108 | **NEW:** Added event of SNMP send failure to Scalable Chassis modules to WTS (What's The Story). |
| HCP-93 | **NEW:** Added a new test that checks Gaia database performance. |
| HCP-70 | **NEW:**Added Support for HCP Extension on MDS |
| HCP-76 | **UPDATE:**Search functionality in the HTML report is now under WIP and disabled. |
| HCP-29 | **UPDATE:**Added the Threshold column to CPView. |
| HCP-26 | **UPDATE:**WTS (What's The Story) will be displayed the HTML report by default. |
| HCP-100 | **UPDATE:** Errors previously printed on the screen while tests are running will be printed to the *hcp.elg* file. |
| HCP-117 | **UPDATE:**HCP test will alert about custom applications with signatures that may cause performance impact. |
| HCP-48 | **UPDATE:** Help message is now displayed if the incorrect command syntax entered. |
| HCP-119 | **UPDATE:** The Local Logging test is now disabled. |
| HCP-128 | **UPDATE:** Added ability to run the *fwkern.conf* sanity test on each VS. |
| HCP-68 | SecureXL status is missing in HCP test. |
| HCP-78 | When running HCP with the wrong "-c" parameter, unnecessary blank HTML report is created. |
| HCP-64 | The *gexec* command has a different default timeout value than *hcpexec*. |
| HCP-96 | Added more information to compatibility check of Forward Error Correction (FEC) feature. |
| HCP-97 | The local logging test fails when a backup server is configured. |
| HCP-98 | The Distribution test does not run from the Scalable Chassis Monitor. |
| HCP-53 | Added core dumps information to WTS (What's The Story). |
| HCP-43 | Cannot move between VSs in ARP CACHE limit test. |
| HCP-47 | Charts tab time shows incorrect time. |
| HCP-71 | The SIM Configuration File Sanity test may fail to find the kernel parameter although it exists. |
| HCP-89 | Long words in the HCP test reports may cause overflow to adjacent table columns. |
| HCP-79 | Added cosmetics fix to MSG Vlans consistency test: replace between the result table titles and add new line at the end of each missing VLAN |
| HCP-77 | The Kernel Crash test shows "PASSED" although there are existing cores dump files. |
| HCP-129 | In some scenarios, the Static Affinity Test fails with exception. |
| HCP-131 | Scalable Platform Clients with ZETCLIENT process is shown as terminated and the Check Point Processes test status displays "ERROR". |
| **Update 2 - Take 29 (18 March 2021)** ||
| HCP-18 | **NEW:** Added the Memory Usage (RAM) test, which analyzes the different memory sections and their current usage. |
| HCP-12 | **NEW:** Added a compatibility test of configured features in Scalable Platform environments (based on [sk148074](https://support.checkpoint.com/results/sk/sk148074)). |
| HCP-15 | **NEW:** Added *--v / -version* argument to display the Take number / RPM build of HCP. |
| HCP-11 | **NEW:** Added ability to see a back trace of core dump files. |
| HCP-20 | **NEW:** Added a new test that verifies that the distribution configurations between local members and SSMs are consistent. |
| HCP-13 | **NEW:** Added a new test that confirms that logs are being written to a Log Server and not locally. |
| HCP-21 | **NEW:**Added the Bond test and Corexl Status on VSX performance tests. |
| HCP-1 | Running HCP on remote members using the "-m" flag is not available in Maestro environments. |
| HCP-23 | Tests that are supposed to run only in Scalable Platform run in all environments. |
| HCP-17 | The FW kern sanity test may fail when using parameter from type "uint". |
| **Update 1 - Take 24 (18 February 2021)** ||
| ODU-81 | Initial Release |
Known Limitations {#Known Limitations}
--------------------------------------
Show / Hide this section
|----------|---------------------------------------------------------------------------------------------------------------|
| Issue ID | Description |
| HCP-477 | When running the Cluster test on a cluster with more that two members, Standby member is shown in Down state. |
| HCP-903 | In a Maestro setup, MTU test may take up to 30 minutes. |
Manual Installation (Offline) {#Manual Installation}
----------------------------------------------------
*
### Instructions for Security Gateways, VSX, Maestro Hyperscale Orchestrator, Management Servers, Log Servers
Show / Hide this Section
1. Download the latest HCP TAR from the **Availability** table.
2. Run this command in the Expert mode:
`# autoupdatercli install `
**Note:** The installation does not require a restart of Check Point services ("`cpstop; cpstart`") or a reboot. After it is installed, no further action is required. The future updates are be applied immediately.
*
### Instructions for Security Groups R80.20SP and higher (Maestro and Scalable Chassis)
Show / Hide this Section
1. Download the latest HCP TAR from the **Availability** table.
2. Copy the TAR to all other members:
`# asg_cp2blades -b all `
3. Run this command in the Expert mode:
`# g_all autoupdatercli install `
4. Delete the TAR file from your system as it is no longer needed after installation.
### Install Validation log
Make sure the package was correctly install.
Check the `/opt/CPInstLog/AutoUpdateLogs/hcp/` log file and make sure the following lines appear:
```
% : Script /var/log/AutoUpdater/metadata/HealthCheck_Point/hcp/hcp_AutoUpdate/24/product_scripts/hcp_post_verify_action.sh output:
[INFO] - verification ended successfully
% : Installation succeeded for component hcp
% : ----------------------------------------------------------------------
```
Uninstall {#Uninstall}
----------------------
Run this command in the Expert mode: `# autoupdatercli revert-completely hcp`
### Uninstall Validation log
Make sure the package was correctly uninstalled.
Check the `/opt/CPInstLog/AutoUpdateLogs/hcp/` log file and make sure the following lines appear:
```
[SUCCESS] - Finish running hcp_unregister.sh
% : Revert succeeded for component hcp
% : ----------------------------------------------------------------------
```
SmartConsole Extension Installation {#Extension}
------------------------------------------------
**Prerequisites:**
1. Make sure the HCP package is installed on your Security Management Server
2. Run the "`hcp -r all`" command at least once on each Security Gateway you want to see the report from.
### Activating Extension on Security Management
Show / Hide this Section
Connect to your Security Management Server via SSH and run:
1. `# service hcp_ext start`
2. `# hcp --ext-update-reports all`
You must run this command on every restart of the Security Management Server to collect a report from the newly created Security Gateway.
### Adding Extension in SmartConsole
*21 STEPS*
1. Adding HCP extension in SmartConsole
2. In SmartConsole, go to the Manage \& Settings view
3. Navigate to Preferences and scroll down
4. In SmartConsole Extensions, click **Plus**
5. In the Import SmartConsole Extension window, insert the link from the SK
6. Write the IP address of your Security Management Server.
7. Click **OK**
8. Click **Continue**
9. Click **OK**
10. The HCP extension is added.
11. In Gateways \& Servers, choose the Security Gateway.
12. Click **Health Check**
13. The HCP window pops up. Go to the Tests tab.
14. And check if there are any warnings
15. To fetch the latest or live report, go to the left top corner, click **Menu**
16. Click Fetch Latest Report
17. Click **OK**
18. The latest report is opened.
19. Click **Fetch Live Report**
20. Click **OK**
21. The live report is shown.
### Here's an interactive tutorial
*\*\* Best experienced in Full Screen (click the icon in the top right corner before you begin) \*\**
Show / Hide this Section
1. Go to **Manage \& Settings** view \> **Preferences** \> **SmartConsole Extensions** \> click "**+**":
2. Enter the following as URL:
`https://:/ngm-management-app/hcp/extension.json`
3. In the next prompt, click "Continue" and then "OK":
|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
|   |
4. You should see HCP extension added:
5. Move to "Gateways \& Servers", Choose your GW and click on "Health Check" button:
6. HCP new window should pop up:
7. To fetch the latest report from the Security Gateway or run it live on it, use one of the following options: "Fetch Latest" Report or "Fetch Live Report":
Tests {#Tests}
--------------
* Self-diagnostics utility program that executes a set of tests.
|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
|   |
* Tests scan the system and can detect:
* Feature/system configuration bad practices
* Foresee future issues that may affect the system
* Historical issues that may re-occur
* Provide a comprehensive structured system assessment report:
* Include each of the tests and a final verdict (Success/Error/Warning)
* Tests that failed show their findings and suggest a next-step action
What's The Story (WTS) {#What's The Story (WTS)}
------------------------------------------------
|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|
| * WTS tells the story of the system by arranging critical/informative events into a timeline * WTS combines events of several processes and services into a single timeline which gives a bird-eye vision * WTS become helpful when troubleshooting issues that affected the system but no longer exists (RCA) * WTS events can be extended |  |
Topology {#Topology}
--------------------
|---------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------|
| * Visualize the firewall topology in the network * Very helpful in complex VSX environments |  |
Usage {#Usage}
--------------
**By default, the command runs with these parameters:**
> `# hcp -r all --include-wts yes`
**Syntax:**
> `# hcp -r {all | "test 1" "test2" ...} [{-f {json | yaml | table}}] [--only-pass-status] [-c []] [-o ]`
>
> `# hcp -l [-f {json | yaml | table}] [-c []]`
>
> `# hcp -m {all | | } ` (on Scalable Platforms only)
>
> `# hcp --ext-update-reports` (on a Management Server only)
**Parameters:**
Enter the string to filter this table:
|----------------------------------------------------------------------------------|------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Parameter | Parameter Status | Parameter Description |
| `-h` `--help` | Optional | Shows the built-in help and exits |
| `-v` `--version` | Optional | Shows the HCP tool Take and the RPM Build |
| `-r {all | "test 1" "test2" ...}` `--run {all | "test 1" "test2" ...}` | Mandatory | Runs all or only the specified HealthCheck Point (HCP) tests |
| `-l` `--list-tests` | Mandatory | Shows all available tests in a table format with these columns: * # * Test Name * Product * Section * Performance Impact |
| `--cli-list-tests` | Optional | Shows all available tests - only the test names, separated by commas |
| `-o ` `--output-file ` | Optional | Specifies the path and name of the output file |
| `-c []` `--context []` | Optional | Available on VSX Gateways / VSX Cluster Members / Scalable Platforms in the VSX mode (Maestro and Scalable Chassis): Specifies the IDs of the Virtual Systems, for which to run the tests **Important** - You must run the "`hcp`" command in the context of VS0 (`vsenv 0`) Example - To run the tests for VS2 and for VS4: *hcp -r all -c 2 4* |
| `-f {json | yaml | table}` `--format {json | yaml | table}` | Optional | Specifies the output display format - JSON, YAML, or table (default) |
| `-L` `--local` | Optional | Available on Scalable Platforms (Maestro and Scalable Chassis): Runs only on the current Security Group Member |
| `-m {all | | }` --members {all \| \ \| \} | Optional | Available on Scalable Platforms (Maestro and Scalable Chassis): * `all` - Runs the tool on all Security Group Members * \ - Runs the tool only on the specified one Security Group Member Example: *hcp -r "Disk Space" -m 2_1* * \ - Runs the tool only on the specified Security Group Members Example 1 (only two specific members): *hcp -r "Disk Space"-m 2_1,2_4* Example 2 (range of three members): *hcp -r "Disk Space"-m 2_1-2_3* |
| `-s` `--silent` | Optional | Runs in a silent mode (no *stdout*) |
| `-ds` `--dbg-stdout` | Optional | Shows debug logs on *stdout* |
| `-df all` `--dbg-facility all` | Optional | Enables debug logs Example: *hcp -df all \* |
| `--domain ` | Optional | On a Multi-Domain Security Management Server, specifies the relevant Domain Management Server (by its IPv4 address or Object Name) |
| `--show-last [--only-failed] [--markdown]` | Optional | Shows a brief report for the last run The parameter "*--only-failed*" shows only the tests that failed (available from Take 52) The parameter "*--markdown*" shows the output in the Markdown format (available from Take 52) |
| `--show-last-full [--only-failed] [--markdown]` | Optional | Shows a full report for the last run The parameter "*--only-failed*" shows only the tests that failed (available from Take 52) The parameter "*--markdown*" shows the output in the Markdown format (available from Take 52) |
| `--include-wts {yes | no}` | Optional | Includes the "**What's The Story (WTS)**" information in the JSON output |
| `--include-topology {yes | no}` | Optional | Includes the topology in the JSON output |
| `--include-charts {yes | no}` | Optional | Includes the history charts in the JSON output |
| `--disable-test ` | Optional | Disables a test (available from Take 52) To see the names of the tests, run: `hcp -l` Example: *hcp --disable-test Licensing* |
| `--enable-test ` | Optional | Enables a test if it was disabled with the parameter "*--disable-test*" (available from Take 52) To see the disabled tests, run: `hcp --show-disabled-tests` Example: *hcp --enable-test Licensing* |
| `--disable-test-file ` | Optional | Disables a test - you must specify the name of the relevant Python file without the extension "`.py`" (available from Take 52) The test scripts are located in */etc/hcp/tests/* Example for the script */etc/hcp/tests/av/threat_prevention/ioc_feeds_stat.py*: *hcp --disable-test-file ioc_feeds_stat* |
| `--enable-test-file ` | Optional | Enables a test if it was disabled with the parameter "*--disable-test-file*" (available from Take 52) To see the disabled test files, run: `hcp --show-disabled-tests` Example for the script */etc/hcp/tests/av/threat_prevention/ioc_feeds_stat.py*: *hcp --enable-test-file ioc_feeds_stat* |
| `--disable-product ` | Optional | Disables all tests for the specified product (available from Take 52) To see the names of the products, run: `hcp -l` Example: *hcp --disable-product VSX* |
| `--enable-product ` | Optional | Enables all tests for the specified product if that product was disabled with the parameter "*--disable-product*" (available from Take 52) To see the disabled products, run: `hcp --show-disabled-tests` Example: *hcp --enable-product VSX* |
| `--show-disabled-tests` | Optional | Shows these (available from Take 52): * Test names that were disabled with the parameter "*--disable-test \*" * Test scripts that were disabled with the parameter "*--disable-test-file \*" * Test products that were disabled with the parameter "*--disable-product \*" Example output: *Skipped tests names: Licensing, Protections Impact Skipped tests files: ioc_feeds_stat Skipped products: VSX* |
| `--set-performance-impact {low | medium | high}` | Optional | Configures HCP to run tests that have the specified maximum performance impact (available from Take 52) To see the test performance impacts, run: `hcp -l` |
| `--ext-update-reports {all | }` | Optional | Refer to the section "SmartConsole Extension Installation". Collects the last report from the specified Security Gateway / Cluster objects. |
| `--ext-update-live-reports {all | }` | Optional | Refer to the section "SmartConsole Extension Installation". Collects the report in real-time from the specified Security Gateway / Cluster objects. |
| `--run-on-remote {all | }` | Optional | Refer to the section "SmartConsole Extension Installation". Runs HCP on the specified Security Gateway / Cluster objects. |
| `--update-on-remote {all | gateway_name} ` | Optional | Update HCP on Security Gateways connected to this Management Server. Example: `hcp --update-on-remote --file ` (should be full path of the *rpm* file or Autoupdater package) |
{#SyntaxTableTable}
**To view report in CLI:**
`# hcp --show-last | less -M`
**To view report in a web browser:**
1. Copy the `/var/log/hcp/last/hcp_last_report.tar.gz` file to your computer to some new folder
2. Extract the archive
3. Open the *index.html* file in your web browser
---
# Agent Instructions
This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.
## Navigating This Knowledge Base
- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content