Created
July 22, 2014 13:46
-
-
Save Avyd/dfb2a5c9cc15296cbf1d to your computer and use it in GitHub Desktop.
CheckPoint_Firewall_CLI_Commands
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| fw ver | |
| fw lslogs # List log files | |
| fw ctl iflist # Interface list | |
| fw ctl pstat # Kernel memory and connections | |
| fw log -c drop # Show dropped connections | |
| fw log -f # Tail logs | |
| fw stat -l # Show flow (policy, drop, accept..etc) | |
| fw monitor -e 'accept host(10.1.1.1);' | |
| fw monitor -e 'accept host(10.1.1.1) and dst=10.1.1.2;' | |
| fw monitor -e 'accept host(1.1.1.1) and host(2.2.2.2) and not ping;' | |
| #Check connections, drops etc | |
| fw ctl zdebug drop | |
| fw log -tnf | |
| fw log -n -s "Apr 12, 2014 09:00:00" | |
| cpstat # Firewall status | |
| cpstat os -f cpu # CPU info | |
| cpstat os -f multi_cpu # CPU info | |
| cpstat os -f perf # Memory status | |
| cphaprob state # Cluster check | |
| cpstat -f multi_cpu os # CPU status | |
| watch --interval 0.5 cpstat fw -f policy # Connections, acceps and drops | |
| cpstat os -f perf | |
| show vrrp interfaces #Redundancy | |
| cphaprob state |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment