- Products
- Learn
- Local User Groups
- Partners
-
More
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
IDC Spotlight -
Uplevel The SOC
Important! R80 and R80.10
End Of Support around the corner (May 2021)
I've been testing R80.20 very intensively in the lab over the last few days. Here I have discovered some interesting new commands on CLI. What did you discover that didn't exist before?
# cphaprob stat > with more clusterxl informations
# fwaccel ranges > show's anti spoofing ranges
# fw ctl multik utilize > shows the CoreXL queue utilization for each CoreXL FW instance
# fw ctl multik print_heavy_conn > shows the table with heavy connections
More see:
Command Line Interface R80.20 Reference Guide
Very good article, thanks
This is very informative. Thanks!
Great new commands.
Yes it only work with kernel 3.10.
got a little bit confusing about the answer as "only with 3.10 kernel". Is the release R80.20 with the fixed kernel rollout or the kernel could be changed from Administrator or could be different by different R80.20-Rollout Variation?
iotop is Linux command, BTW. It is available for newer Linux distributions than 2.6 kernel based
Excellent commands
Thanks for contribution.
At R80.20 there's a new hack to turn the CoreXL instances on the fly on and off. Here is an example with 3 FW wokers!
Now start the command:
# fw ctl multik stop -> stop CoreXL instance 1
# fw ctl multik stop -> stop CoreXL instance 2
# fw ctl multik stop -> The last instance cannot be disabled:-)
You can activate it again per:
# fw ctl multik start
Conclusion:
CoreXL 0 cannot really be deactivated under R80.10+:-)
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY