Offline Rule base matching command(R80.x)

[Danny_Yang]

Hi All,

fw up_execute (offline rule based execution)這個指令的output, 可以檢查gateway rule matching

如果客戶想知道某些服務會命中到哪些規則，就不用去查那些accept或drop log了，這是直接比對rule base DB的結果。

只有R80.10以後才有支援，R80.20才有文件資料。

https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_CLI_ReferenceGuide/html_f...

範例:

[Expert@MyGW:0]# fw up_execute src=126.200.49.240 dst=10.1.1.1 ipp=1

Rulebase execution ended successfully.

Overall status:

----------------

Active clob mask: 0

Required clob mask: 0

Match status: MATCH

Match action: Accept

Per Layer:

------------

Layer name: Network

Layer id: 0

Match status: MATCH

Match action: Accept

Matched rule: 2

Possible rules:  2 16777215