Delete Changes

[RemoteUser]

Hi everyone,

I have one session that is locked, but it’s very old.
Is there any way to delete this session without impacting the changes of my colleagues?

[Vincent_Bacher]

Just have a look at the session list if there are db locks.
In R82 it looks like this:

Once checked and there are no locks (remember in R81 it looked bit different but you see if something is locked) you may disconnect the session safely. (right click)

In case there are locks, you may takeover the session and check.

Once session is taken over, you can check the changes.
I usually enable the session pane 



Then when opening session pane you see the list of activities at the top and the details at the bottom and you can verify and decide if you want to discard or publish this session.

Right clicking you can open the affected object or rule or whatsoever.

But honestly said, if this is a very old session, it's unlikely that the changes are very important, right? 🙂

[Danny]

In SmartConsole > Manage & Settings > Sessions > View Sessions simply discard the old session or take it over and then discard it.

[RemoteUser]

It's pretty strange because i see that session is locked, but i don't see that in the  Sessions > View Sessions 

[the_rock]

Hey bro,

Try mgmt cli as per below:

https://sc1.checkpoint.com/documents/latest/APIs/#cli/show-session~v2.0.1%20

example in my lab:

[Expert@CP-MANAGEMENT:0]# mgmt_cli show session --format json
Username: admin
Password:
{
"uid" : "cf2fc778-d8a7-4a18-9f9b-0a8eadad841c",
"type" : "session",
"domain" : {
"uid" : "41e821a0-3720-11e3-aa6e-0800200c9fde",
"name" : "SMC User",
"domain-type" : "domain"
},
"state" : "open",
"user-name" : "admin",
"description" : "",
"last-login-time" : {
"posix" : 1763132728324,
"iso-8601" : "2025-11-14T10:05-0500"
},
"expired-session" : false,
"application" : "WEB_API",
"changes" : 0,
"in-work" : true,
"ip-address" : "127.0.0.1",
"locks" : 0,
"email" : "",
"phone-number" : "",
"connection-mode" : "read write",
"session-timeout" : 600,
"connected-server" : {
"uid" : "a475d4ab-c341-9a40-9ea3-6baa1b8aded4",
"name" : "CP-MANAGEMENT",
"type" : "checkpoint-host",
"domain" : {
"uid" : "41e821a0-3720-11e3-aa6e-0800200c9fde",
"name" : "SMC User",
"domain-type" : "domain"
},
"icon" : "NetworkObjects/management",
"color" : "red"
},
"workflow-state" : "open",
"workflow-history" : "",
"comments" : "",
"color" : "black",
"icon" : "Objects/worksession",
"tags" : [ ],
"meta-info" : {
"lock" : "unlocked",
"validation-state" : "ok",
"last-modify-time" : {
"posix" : 1763132728330,
"iso-8601" : "2025-11-14T10:05-0500"
},
"last-modifier" : "admin",
"creation-time" : {
"posix" : 1763132728307,
"iso-8601" : "2025-11-14T10:05-0500"
},
"creator" : "admin"
},
"read-only" : true,
"available-actions" : { }
}
[Expert@CP-MANAGEMENT:0]#

btw, you dont see anything below?

 

[the_rock]

@RemoteUserUltimately, just tell people you will do cprestart on the mgmt, will kick everyone out of smart console, wait few mins, run api status to make sure its successful, thats it.

[Vincent_Bacher]

The good old-fashioned sledgehammer approach.

[the_rock]

Sometimes, thats the BEST approach lol

[Vincent_Bacher]

by the way

[the_rock]

hahaha