- Products
- Learn
- Local User Groups
- Partners
- More
AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You
Blueprint Architecture for Securing
The AI Factory & AI Data Center
Call For Papers
Your Expertise. Our Stage
Good, Better, Best:
Prioritizing Defenses Against Credential Abuse
Ink Dragon: A Major Nation-State Campaign
Watch HereCheckMates Go:
CheckMates Fest
i am looking for command to stop one virtual firewall on vsx cluster ver. R77.30.
I'm not sure if it applies to R77.30 but recently I received this undocumented command for restarting a single VS on R80.10: fw vsx restart_vs <VSID>
Example for restarting VS 3: fw vsx restart_vs 3
Hi Amit,
Some commands and tasks are recommended only to be run in consultation with TAC or under specific circumstances.
Could you please outline the scenario that you are faced with relating to the above requirement so that we might be able to assist further?
Thanks,
Chris
we have one VSX cluster with 10 virtual firewall , using VSLS . we want to stop 4 virtual firewalls on both side (active/standby). don't want to delete these permanently
That doesn't explain WHY you want to stop them, which is the question.
I believe we plan to support this functionality in the future, but do not currently.
I cannot answer for Amit's specific situation, but you can run into a situation where you need to change a file within the context of a single Virtual System followed by a cpstop/cpstart. In some environments it's easier to propose a change for CAB approval when you only are able to restart a single Virtual System and not the whole VSX gateway. This functionality would be very welcome in a future release.
As far as I know stopping one single VS is not supported
As far as i know :
clusterXL_admin up
clusterXL_admin down
When using VSLS, afaik stoping a VS is impossible as another instance of the VS will take over instantly. Its a feature not a bug...
clusterXL_admin down switch ha to the other member, if you try it int the last active member, you get:
Setting member to administratively down state ...
Member current state is ACTIVE(!)
All the members within the cluster have problem/s and the local member was chosen to become active
the only way i'v found to acomplish this is to put all his interfaces down
- switch to vs desired:
vsenv x
- see the name of the interfaces
ifconfig -a | grep HWaddr
- put down one by one ( except the loopback)
ifconfig <name> down
I'm not sure if it applies to R77.30 but recently I received this undocumented command for restarting a single VS on R80.10: fw vsx restart_vs <VSID>
Example for restarting VS 3: fw vsx restart_vs 3
I know this was posted down in 2020, I'm sorry to resurrect this post, but it helped me now in 2022!
Nice command!
Thanks
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 66 | |
| 19 | |
| 13 | |
| 12 | |
| 11 | |
| 10 | |
| 7 | |
| 7 | |
| 7 | |
| 7 |
Tue 28 Apr 2026 @ 06:00 PM (IDT)
Under the Hood: Securing your GenAI-enabled Web Applications with Check Point WAFThu 30 Apr 2026 @ 03:00 PM (PDT)
Hillsboro, OR: Securing The AI Transformation and Exposure ManagementTue 28 Apr 2026 @ 06:00 PM (IDT)
Under the Hood: Securing your GenAI-enabled Web Applications with Check Point WAFThu 30 Apr 2026 @ 03:00 PM (PDT)
Hillsboro, OR: Securing The AI Transformation and Exposure ManagementAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY