Firewalls Commands

fw
lslogs

 display remote machine log-file list

fw
logswitch

 rotate current log file

fw
lichosts

 display protected hosts

fw
exportlog .o

 export current log file  ascii file

fw
ctl uninstall

 uninstall hosts internal interfaces

fw
ctl install

 install hosts internal interfaces

fw
ctl pstat

System
Resource stats

fw
ctl ip_forwarding

Control
IP forwarding

fw
ctl arp

 show arp table

fw
ctl get int [global kernel
parameter]

 shows the current value of a global kernel
parameter

fw
ctl set int [global kernel
parameter]  [value]

Sets
the current value of a global keneral parameter. 

OnlyTemp ; Cleared after reboot.

fw
tab  -t sam_blocked_ips

 block IPS via SmartTracker

fw
tab -t connections -s

 show connection stats

fw
tab -t connections -f

 show connections with IP instead of HEX

fw
tab -t fwx_alloc -f

 show fwx_alloc with IP instead of HEX

fw
tab -t peers_count –s
fw tab -t userc_users -s

 show VPN stats

fw
lslogs

 display remote machine log-file list

fw
logswitch

 rotate current log file

fw
lichosts

 display protected hosts

fw
exportlog .o

 export current log file  ascii file

Firewalls Commands

fw
ctl uninstall

 uninstall hosts internal interfaces

fw
ctl install

 install hosts internal interfaces

fw
ctl pstat

System
Resource stats

fw
ctl ip_forwarding

Control
IP forwarding

fw
ctl arp

 show arp table

fw
ctl get int [global kernel
parameter]

 shows the current value of a global kernel
parameter

fw
ctl set int [global kernel
parameter]  [value]

Sets
the current value of a global keneral parameter. Only
Temp ; Cleared after reboot.

fw
tab  -t sam_blocked_ips

 block IPS via SmartTracker

fw
tab -t connections -s

 show connection stats

fw
tab -t connections -f

 show connections with IP instead of HEX

fw
tab -t fwx_alloc -f

 show fwx_alloc with IP instead of HEX

fw
tab -t peers_count –s
fw tab -t userc_users -s

 show VPN stats

fwstart

 start the firewall

fwsp

 sp the firewall

fw
unloadlocal

 unload the policy

fw
monir

Packet
sniffer

fw
ver –k

Returns
version, patch info and Kernal info

fw
stat -l

 display long stat list showing which
policies are installed

fw
stat -s

 display short stat list showing which
policies are installed

fw
printlic -p

Prints
current Firewall modules

fw
putkey

 install authenication key on the host

fw
fetch

Fetch
security policy and install

fw
fetch localhost

 install (on gateway) the last installed
policy.

fw
hastat

 show Cluster statistics

fw
log -f

Tail
the current log file

fw
log -s -e

Retrieve
logs between times

fw
checklic

 check license details

fw
printlic

 print current license details

SPLAT Only Commands

resre

 allow you 
rese your backup

backup

 allow you 
perform a system operating system backup

patch
add cd

 allow you 
mount an iso and upgrade your checkpoint
software

router

 enter router mode for use on Secure Platform
Pro for
advanced routing options

Snapshot

  system backup which includes all Checkpoint
binaries.

Debug Command

fw
ctl zdebug drop

Disaplay
dropped packets in realtime / give reason for drop

CP Commands

cpstart

 start all Checkpoint Services

cprestart

 restart all Checkpoint Services

cpsp
-fwflag -proc

 sp all checkpoint Services but keeps policy active in kernel

cplic
print

 print all the licensing information.

cp_conf
sic

SIC
stuff

cphastart/sp

 sp clustering on the specific node

cphaprob
stat

 list cluster status

cphaprob
syncstat

 show the sync status

cphaprob
list

 show a status in list form

cphaprob
-a if

 list status of interfaces

cpsp

 sp all Checkpoint Services

cpwd_admin
list

 list checkpoint processes

cpstat

 show the status of the firewall

Firewall Management Commands

fwm
-a

add
an Admin

fwm
-r

delete
an administrator

fwm
-p

print
a list of Admin users

fwm_start

 start the management processes

fwm
dbexport -f user.txt

 export users , can also use dbimport

fwm
lock_admin -v

view
locked admin accounts

VPN

vpn
tu

VPN
utility, allows you  rekey vpn

dtps
lic

 show deskp policy license status

cpstat
-f all polsrv

 show status of the dtps

vpn
ipafile_check ipassignment.conf
detail

 verify theipassignment.config file

vpn
shell show interface detailed [VTI
name]

 show VTI detail

vpn
shell
/tunnels/delete/IKE/peer/[peer ip]

 delete IKE SA

vpn
shell
/tunnels/delete/IPsec/peer/[peer ip]

 delete Phase 2 SA

vpn
shell /show/tunnels/ike/peer/[peer
ip]

 show IKE SA

vpn
shell
/show/tunnels/ipsec/peer/[peer ip]

 show Phase 2 SA

VSX

vsx
get [vsys name/id]

 get the current context

vsx
set [vsys name/id]

 set your context

reset_gw

 reset the gateway, clearing all previous
virtual devices and
settings.

fw
-vs [vsys id] getifs

 show the interfaces for a virtual device

fw
vsx stat –l

 show a list of the virtual devices and
installed policies

fw
vsx stat –v

 show a list of the virtual devices and
installed policies