cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post

My Top 3 Check Point CLI commands

Just had a fun geeky conversation with Dameon Welch Abernathy (AKA Phoneboy) Jony Fischbein , Jeff Schwartz and Michael Poublon (over 100 accumulated years of experience in Check Point products) , on what are our favorite & most useful commands in a Check Point environment.Below are my 3 , plz add yours in the comments (we will do a poll for the top 5 after getting your feedback ... ). 1) fw ctl zdebug drop used to quickly see all dropped connections and more importantly the reason (e.g. anti-spoofing, IPS , FW rule , ....) 2) cpstat fwquickly see stats of number of connections (accepted,denied,logged) with a breakdownif the FW was under a high load i would usually run " watch --interval=1 'cpstat fw' " (would see a real-time to see the interface that is causing this) 3) fw tab -s -t connections allowed me to quickly see how much load is (and was i.e "peak" ) on the FW that's it (i have more , but i want to hear yours ...)plz add yours in the comments (we will do a poll for the top 5 after getting your feedback ... )
TO READ THE FULL POST it's simple and free