topic Re: Common Check Point Commands (ccc) in Scripts

ccc - Common Check Point Commands

Danny — Tue, 08 Jul 2025 06:57:30 GMT

🏆 Code Hub Contribution of the Year 2018!
🎓 Featured in official Maestro courseware!
👍 Endorsed by Check Point Support!
📕 Books: Max Power, FW Admin
▶️ YouTube: Intro

ccc script to run CLI tasks & show system info.

Installation

curl_cli $(if [[ `grep proxy:ip /config/active` ]];then echo -n '--proxy ';grep proxy:ip /config/active|cut -f2 -d' '|tr -d '\n';echo -n :;grep proxy:port /config/active|cut -f2 -d' ';fi) --cacert $CPDIR/conf/ca-bundle.crt https://dannyjung.de/ccc|zcat > /usr/bin/ccc && chmod +x /usr/bin/ccc;. ~/.bashrc

Re: Common Check Point Commands (ccc)

Moti — Tue, 19 Sep 2017 12:42:57 GMT

You sir are awesome!!

Re: Common Check Point Commands (ccc)

MK9 — Wed, 20 Sep 2017 07:09:01 GMT

Thank you!

Re: Common Check Point Commands (ccc)

Marko_Keca — Mon, 25 Sep 2017 13:27:55 GMT

Great job!

Here is a little bit improved code (added hierarchy and some interactivity).

Dropbox - ccc

Regards,

Marko

Re: Common Check Point Commands (ccc)

Moti — Thu, 28 Sep 2017 14:26:34 GMT

Thx, can u post in code-hub

Re: Common Check Point Commands (ccc)

Danny — Sun, 09 Feb 2020 17:09:12 GMT

I moved this thread to the Code Hub and added @Marko_Keca‌'s Interactive Mode to this ccc script. I corrected/removed an issue with the 'view all commands' option, cleaned the interactive interface, added more commands and therefore raised the version level to 0.4. Thanks everyone for all the interest and support within this project!

Re: Common Check Point Commands (ccc)

Mohammed_Jamshe — Sun, 26 Nov 2017 07:45:45 GMT

Hello Danny,

Thanks for this great work,a short 10 minute tutorial video on this will be aslo add great taste to it.

Thanks and Regards.

Re: Common Check Point Commands (ccc)

G_W_Albrecht — Tue, 06 Feb 2018 09:45:40 GMT

That is really very helpfull! Just one line i have found that i do not understand:
9) fwm stat

This gives:

Usage:
fwm ver [-f] ...                                 # Display version
fwm load [opts] [filter-file|rule-base] targets # Install Policy on targets
fwm unload [opts] targets                        # Uninstall targets
fwm dbload [targets]                             # Download the database
fwm logexport [-h] ...                           # Export log to ascii file
fwm gen [-RouterType [-import]] rule-base        # Generate an inspection
                                                 # script or a router access-list
fwm dbexport [-h] ...                            # Export the database
fwm ikecrypt <key> <password>                    # Crypt a secret with a key
                                                 # (for the dbexport command)
fwm dbimport [-h] ...                            # Import to database
fwm kill [-sig_no] procname                      # Kill firewall process
fwm getpcap ...                                  # Fetch packet capture from gateway

Looks like there is no fwm stat like there is fw stat... I have replaced the line with

fwm ver

😉

Re: Common Check Point Commands (ccc)

G_W_Albrecht — Tue, 06 Feb 2018 11:29:49 GMT

I now saw thet here, the installed_jumbo_take CLI command is used - this did work before, but see sk98028:

On R80.10 with sk116380 - Jumbo Hotfix Accumulator for R80.10 (R80_10_jumbo_hf), run this command:
[Expert@HostName:0]# cpinfo -y all
Notes:
- The installed_jumbo_take [-n | -h] command is not supported by the R80.10 Jumbo Hotfix Accumulator

Re: Common Check Point Commands (ccc)

Martin_Heim — Wed, 21 Feb 2018 10:33:23 GMT

The script is great.

I added a little improvement for the command #23: fw fetch mgmt.

if you do not want the name of the management to be hardcoded for each gateway:

read in the name of the management with
MGMT=$(cat $FWDIR/conf/masters | awk 'NR>1 && NR<3 { print $0 }')

command#23:
fw fetch $MGMT

Best regards
Martin

Re: Common Check Point Commands (ccc)

Danny — Mon, 26 Feb 2018 11:09:45 GMT

Implemented in version 0.6

Re: Common Check Point Commands (ccc)

Danny — Mon, 26 Feb 2018 11:09:54 GMT

Implemented in version 0.6

Re: Common Check Point Commands (ccc)

HeikoAnkenbrand — Tue, 27 Feb 2018 18:34:33 GMT

I have a nice ClusterXL debug command:

clish -c "show routed cluster-state detailed"

It shows the gateway change time.

Re: Common Check Point Commands (ccc)

Maarten_Sjouw — Tue, 27 Feb 2018 22:52:22 GMT

Another useful command in this list would be

fw ctl arp

which will show all proxy arp's and active local.arp entries.

Re: Common Check Point Commands (ccc)

Danny — Wed, 28 Feb 2018 13:15:44 GMT

This command is already implemented.

Re: Common Check Point Commands (ccc)

Danny — Thu, 01 Mar 2018 15:34:56 GMT

Implemented in version 0.8

Re: Common Check Point Commands (ccc)

MikaelJohnsson — Thu, 01 Mar 2018 17:52:14 GMT

Hi,

Great idea but place add it as fw ctl arp -n

to avoid dns-lookups.

Cheers

Mikael

Re: Common Check Point Commands (ccc)

Sven_Glock — Thu, 01 Mar 2018 18:47:35 GMT

Thanks Danny - nice script.

Improvement suggestion:

When the selected command shows lots of output you have to scroll up for checking the possibilities of your actual branch of the menu tree.

Prompting the menu again directly after the output will need you scrolling up for your requested output.

What about offering a short menu after a output - just one row?

Something like: ? Show actual Menu | 0: Main menu | q: EXIT

Cheers

Sven

Re: Common Check Point Commands (ccc)

HeikoAnkenbrand — Fri, 02 Mar 2018 14:46:06 GMT

I have adjusted the commands, so that only the physical interface is visible and not the Bond's anymore.

ifconfig -a | grep encap | awk '{print $1}' | grep -v lo | grep -v bond | grep -v ":" | grep -v ^lo | xargs -I % sh -c 'ethtool %; ethtool -i %' | grep '^driver\|Speed\|Duplex\|Setting' | sed "s/^/ /g" | tr -d "\t" | tr -d "\n" | sed "s/Settings for/\nSettings for/g" | awk '{print $5 " "$7 "\t " $9 "\t" $3}' | grep -v "Unknown"

Regards

Heiko

Re: Common Check Point Commands (ccc)

Danny — Sat, 03 Mar 2018 05:58:51 GMT

Implemented in version 0.9