Debug stop commands

[-K-]

Hi All,

Just a quick one, is there any general command to stop debugs running on firewall gateway as when in a large scale environment multiple team is managing or operating checkpoint firewalls its highly possible that someone started debug and then forget to turn it off.

I know below which we can put in crontab which will run every hour to check and turn off debug if its already running and missed to turn it off to avoid high CPU and performance issue on gateway.

fw ctl debug 0
fwaccel dbg resetall

crontab -e

0 * * * * /var/log/debug_stop_script.sh

[Chris_Atkinson]

Please see the following previous discussion

https://community.checkpoint.com/t5/General-Topics/Global-command-for-turning-off-debugging/td-p/117...

[the_rock]

Personally, I had been doing only below 2 commands for the last 15 years and they never let me down : - )

Andy

fw ctl debug 0

fw ctl debux -x

[-K-]

fw ctl debux -x  --> you mean fw ctl debug -x right ?

what will be the use for -x ....plesae suggest?

[the_rock]

Yes, debug, not debux LOL

-x to disable, 0 to turn off

Andy