- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Re: fw up_execute command
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
fw up_execute command
whether Fw up_execute command is available only in R80.10 and share any kb documents for the command
- Labels:
-
Policy Installation
-
SmartConsole
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
fw up_execute appears to be only available on R80.10 and above.
By simply typing fw up_execute, you do get a usage prompt that explains how to use the command.
From the looks of it, it's a way to evaluate how the rulebase will evaluate a given packet/application.
If you don't mind me asking, where did you find this command?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Jozko Mrkvicka
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
This "fw up_execute" tool seems to me not to be "accurate".
I am testing a communication flow, from a source to a destination, by protocol 6(TCP) and a destination port that is SSH, but it "shows" me a TOTALLY different rule than the one that has been created (The logs do show the correct rule), but this tool, seems not to be accurate.
Is it possible to update the use of this tool via the CLI?
Does fw up_execute depend on a particular "daemon"?
Greetings.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The command "fw up_execute" is supposed to be officially supported starting from R82.
Jozko Mrkvicka
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So, it is not very useful in versions like R80.40, R81 or R81.10, because I have tried the command, and it does not show me an "exact" result.
It shows me a too general rule.
On the other hand, if I make the filter in the search engine of the security rules of the same SmartConsole, it gives me the expected result.
