Health Check

This section describes how to use the health check.

Before using this function, ensure that the current administrator has the read and write permissions of the health check function. If the administrator does not have the required permissions, the system administrator must grant the permissions to the administrator.

Log in to the web UI as the system administrator, choose System > Administrator > Administrator Role, click Edit icon, and change the Monitor > Heath Check permission under Permission to Read/Write. The system administrator has the read and write permissions by default. Therefore, this step can be skipped for the system administrator.

You can choose Monitor > Heath Check and view the health score of the device .You can also view details about the hardware, network, service, resource usage, and signature database update, and troubleshooting suggestions. Then you can optimize the device based on the handling suggestions.

Choose Monitor > Heath Check.
Click Re-Check. In the Configure Check Item dialog box displayed, select the check items and click OK to start the check.
The system displays the health score of the last check. To view the current health status, click Re-Check.

In the scenario of server or network detection under network and service health, the device can perform health check only based on the route query result. It does not support health check if users specify the source IP address, source interface, or server where the VPN instance is configured.

The health index is the weighting coefficient multiplying by the average value of four-dimension scores. The weighting coefficient is determined by the lowest score. That is, the weighting coefficient is 1 for 100 points, 0.9 for 80 to 99 points, 0.8 for 60 to 79 points, and 0.7 for 59 points and less.

The total health index score is calculated using this formula: S = (S1 + S2 + S3 + S4)/4 x W. In this formula, S indicates the total score; Si (i = 1, 2, 3, or 4) indicates the score of each dimension. W indicates the weighting coefficient of the dimension with the lowest score.
View the check results. If you need to ignore some check items, click Ignore on the right of the window. Then the corresponding check items will be removed from the list and not be checked next time.

For internal servers, you can query the health status of the first 10 servers on Server Mapping List in Policy > NAT Policy > Server Mapping. To query the health status of all servers, click Diagnose following each server on Server Mapping List in Policy > NAT Policy > Server Mapping. The check packets of the NAT server are ICMP packets, which cannot be changed to other protocol packets. If no response packet is received from the remote server within a check period (3 seconds, three check packets sent), the FW displays a health check error for the NAT server.