topic Offline Rule base matching command(R80.x) in Chinese 中文 https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Offline-Rule-base-matching-command-R80-x/m-p/18263#M263 <HTML><HEAD></HEAD><BODY><P style="margin: 0in 0in 0pt;">Hi All,</P><P style="margin: 0in 0in 0pt;">fw up_execute (offline rule based execution)這個指令的output, 可以檢查gateway rule matching</P><P style="margin: 0in 0in 0pt;">如果客戶想知道某些服務會命中到哪些規則，就不用去查那些accept或drop log了，這是直接比對rule base DB的結果。</P><P style="margin: 0in 0in 0pt;">只有R80.10以後才有支援，R80.20才有文件資料。</P><P style="margin: 0in 0in 0pt;"><A href="https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_CLI_ReferenceGuide/html_frameset.htm"><SPAN style="text-decoration: underline;">https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_CLI_ReferenceGuide/html_frameset.htm</SPAN></A></P><P style="margin: 0in 0in 0pt;"></P><P style="margin: 0in 0in 0pt;">範例:</P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">[Expert@MyGW:0]# fw up_execute src=126.200.49.240 dst=10.1.1.1 ipp=1</SPAN></P><P style="margin: 6pt;"></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-size: small; font-family: Courier New;">Rulebase execution ended successfully.</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Overall status:</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">----------------</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Active clob mask: 0</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Required clob mask: 0</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Match status: MATCH</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Match action: Accept</SPAN></P><P style="margin: 6pt;"></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-size: small; font-family: Courier New;">Per Layer:</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">------------</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Layer name: Network</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Layer id: 0</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Match status: MATCH</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Match action: Accept</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Matched rule: 2</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Possible rules:&nbsp; 2 16777215</SPAN></P></BODY></HTML> Tue, 20 Nov 2018 16:02:02 GMT Danny_Yang 2018-11-20T16:02:02Z Offline Rule base matching command(R80.x) https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Offline-Rule-base-matching-command-R80-x/m-p/18263#M263 <HTML><HEAD></HEAD><BODY><P style="margin: 0in 0in 0pt;">Hi All,</P><P style="margin: 0in 0in 0pt;">fw up_execute (offline rule based execution)這個指令的output, 可以檢查gateway rule matching</P><P style="margin: 0in 0in 0pt;">如果客戶想知道某些服務會命中到哪些規則，就不用去查那些accept或drop log了，這是直接比對rule base DB的結果。</P><P style="margin: 0in 0in 0pt;">只有R80.10以後才有支援，R80.20才有文件資料。</P><P style="margin: 0in 0in 0pt;"><A href="https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_CLI_ReferenceGuide/html_frameset.htm"><SPAN style="text-decoration: underline;">https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_CLI_ReferenceGuide/html_frameset.htm</SPAN></A></P><P style="margin: 0in 0in 0pt;"></P><P style="margin: 0in 0in 0pt;">範例:</P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">[Expert@MyGW:0]# fw up_execute src=126.200.49.240 dst=10.1.1.1 ipp=1</SPAN></P><P style="margin: 6pt;"></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-size: small; font-family: Courier New;">Rulebase execution ended successfully.</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Overall status:</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">----------------</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Active clob mask: 0</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Required clob mask: 0</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Match status: MATCH</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Match action: Accept</SPAN></P><P style="margin: 6pt;"></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-size: small; font-family: Courier New;">Per Layer:</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">------------</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Layer name: Network</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Layer id: 0</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Match status: MATCH</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Match action: Accept</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Matched rule: 2</SPAN></P><P style="margin: 6pt;"><SPAN style="color: #000000; font-family: Courier New; font-size: small;">Possible rules:&nbsp; 2 16777215</SPAN></P></BODY></HTML> Tue, 20 Nov 2018 16:02:02 GMT https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Offline-Rule-base-matching-command-R80-x/m-p/18263#M263 Danny_Yang 2018-11-20T16:02:02Z