Checkpoint Firewall - Troubleshooting Dropped Connections

When trying to troubleshot unexplained connection drops, try running the following script on the Checkpoitn firewall command line interface (you will need to be in active mode first). This script will take a list of all of the active connections in a human readable format (fw tab -t connections -f -u), then remove any errors (2 /dev/null) and then search only for the host you are interested in (grep 192.168.64.1).

while [ 1 ] ; do echo "***********************************************************************" ; clock ; echo "**********************************************************************" ; fw tab -t connections -f -u 2 /dev/null | grep 192.168.64.1 ; echo ; sleep 1 ; done