What command is usually used for general firewall kernel debugging and what is the size of the buffer that is automatically enabled when using the command?

The fw ctl zdebug command is a wrapper script designed to simplify the process of collecting a general firewall kernel debug. When this command is executed without any specific buffer size arguments, it automatically performs several actions: it stops any existing debug, allocates a kernel buffer of a default size, and then enables a predefined set of general debug flags. The default buffer size allocated by this command is 32768 KB, which is equivalent to 32 MB. This provides a standard starting point for troubleshooting common connectivity and performance issues.

A. fw ctl debug is used for setting specific debug flags and requires manual buffer allocation; it does not automatically enable a buffer.
B. While fw ctl zdebug is the correct command, the default buffer size is 32768 KB (32 MB), not 1 MB.
C. fw ctl kdebug is not the standard command for initiating a general firewall kernel debug in Check Point Gaia.

1. Check Point Support Center, sk112334: "Kernel Debugging on Security Gateway". In the section "Procedure", Step 2 states: "Run the fw ctl zdebug command to start the kernel debug. This command will allocate a 32768 KB (32 MB) buffer by default and will enable the most common kernel debug flags."

2. Check Point R81.10 Security Gateway and Management CLI Reference Guide. In the chapter "Firewall Commands", the description for fw ctl zdebug specifies its function as a script for general debugging and notes the default buffer allocation. The guide states, "The fw ctl zdebug command is a script that runs fw ctl debug with a default buffer size and a default set of flags." The default size is documented as 32768 KB.