CLI Command to view SmartDefense packet drops that do not show in Tracker?

[hotice_]

Hi,
Is there a CLI command to allow us to view all SmartDefense dropped packets that do NOT show up in the Tracker?

I'm thinking of something in the lines of inserting fw monitor in a specific position within the chain modules

Just getting more and more frustrated as we migrate all of our customers to NGX R65 and its SmartDefense module on steroids blocking stuff when it shouldn't and most importantly, not showing it in the tracker.
----
I'm sure level 3-4 Checkpoint engineers at their support center must use this somehow for debugging...

[Thorpuse]

There's nothing I'm aware of..... I've been asking for SD debugging tools for years.

Part of the problem is that some of the issues with SmartDefense aren't because packets are being dropped, but because the traffic is being buffered in inadequately sized buffers (I'm looking at you, Mr ASCII Only Response Headers...). But there's no way to track these buffer sizes, and nothing gets logged, because technically, the SD is still doing its job and the connection isn't dropped, just very, very lagged.

I'll add this to my RFE list to take to Check Point at CPX Asia....

[hotice_]

Thanks for the insight Thor

I've submitted my own RFE to ou local SE too :)