topic Re: FW unloadlocal does not R81.20 in General Topics

FW unloadlocal does not R81.20

mfugate — Thu, 02 May 2024 15:04:33 GMT

AFter entering in fw unloadlocal. I get following message... Local host is not a firewall-1 module. Check_Point_R81.20_T631. This is for Lab I am building for CCSA

Re: FW unloadlocal does not R81.20

the_rock — Thu, 02 May 2024 16:56:05 GMT

Because its mgmt server, there is no policy, that command ONLY works on fw or standalone setup.

Andy

Re: FW unloadlocal does not R81.20

the_rock — Thu, 02 May 2024 19:38:18 GMT

Example from my Azure lab cluster member (I just added -b AMW flag for threat prevention)

Andy

[Expert@cpazurecluster1:0]# fw stat -b AMW
Anti Bot: Disabled (network signatures=0 behavioral=0)
Anti Virus: Disabled (network signatures=0 behavioral=0)
IPS: Enabled (use "ips stat")
Threat Emulation: Disabled
Threat Extraction: Disabled
Mail policy: Off
Zero Phishing: Off
files: http=0 ftp=0 smb=0 smtp=0 pop3=0
more: fileapp_ctx_enabled=0 ifi=0 http_dynamic_enabled=0 icap_server_enabled=0 min_severity=2 min_confidence=0
Policy: azure-cluster-lab-policy Thu May 2 15:07:17 2024 (traditional=1)
[Expert@cpazurecluster1:0]#

Re: FW unloadlocal does not R81.20

the_rock — Thu, 02 May 2024 23:22:53 GMT

Also, I just wanted to add this, because I know some people still confuse the terms, so its clear 🙂

mgmt server - just a single management

management HA - primary + secondary management (either can active or standby)

single fw - just one firewall managed by management server

cluster - 2 fw's either in HA or load sharing

standalone - some people may confuse this with single fw, but its actually fw AND management in one

full HA - 2 standalone configs in a cluster

Hope that helps.

Best,

Andy