- CheckMates
- :
- CheckMates Toolbox
- :
- Scripts
- :
- Re: ONELINER - Show all SecureXL Parameter
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Show all SecureXL Parameter - ONELINER
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


This oneliner shows you all SecureXL parameter (int, uint and string) of the firewall gateway with their values.
This can be useful in the debug case to see an overview of all SecureXL parameters.
modinfo -p $PPKDIR/boot/modules/sim_kern*.o | sort -u | grep -E 'int param' | awk 'BEGIN {FS=":"} ; {print $1}' | xargs -i -n 1 fw ctl get int {} -a 2> /dev/null | grep PPAK | sed -r 's/PPAK 0://'; modinfo -p $PPKDIR/boot/modules/sim_kern*.o | sort -u | grep -E 'string param' | awk 'BEGIN {FS=":"} ; {print $1}' | xargs -i -n 1 fw ctl get string {} -a 2> /dev/null | grep PPAK | sed -r 's/PPAK 0://'
Here is an example of the output:
This oneliner shows you all SecureXL parameter (int, uint and string) of the firewall gateway with their values.
This can be useful in the debug case to see an overview of all SecureXL parameters.
modinfo -p $PPKDIR/boot/modules/sim_kern*.o | sort -u | grep -E 'int param' | awk 'BEGIN {FS=":"} ; {print $1}' | xargs -i -n 1 fw ctl get int {} -a 2> /dev/null | grep PPAK | sed -r 's/PPAK 0://'; modinfo -p $PPKDIR/boot/modules/sim_kern*.o | sort -u | grep -E 'string param' | awk '
...;
Disclaimer: Check Point does not provide maintenance services or technical or customer support for third party content provided on this Site, including in CheckMates Toolbox. See also our Third Party Software Disclaimer.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


Er no, that command will show all INSPECT kernel values not SecureXL in R80.20+. Try this:
modinfo -p $PPKDIR/boot/modules/sim_kern*.o | sort -u | grep 'int param' | awk 'BEGIN {FS=":"} ; {print $1}' | xargs -i -n 1 fw ctl get int {} -a 2> /dev/null | grep PPAK
-a added to query SecureXL, but it also queries INSPECT simultaneously and generates a lot of error messages hence the 2> /dev/null and grep for PPAK so we only see variable results from SecureXL and not INSPECT
CET (Europe) Timezone Course Scheduled for July 1-2
Er no, that command will show all INSPECT kernel values not SecureXL in R80.20+. Try this:
modinfo -p $PPKDIR/boot/modules/sim_kern*.o | sort -u | grep 'int param' | awk 'BEGIN {FS=":"} ; {print $1}' | xargs -i -n 1 fw ctl get int {} -a 2> /dev/null | grep PPAK
-a added to query SecureXL, but it also queries INSPECT simultaneously and generates a lot of error messages hence the 2> /dev/null and grep for PPAK so we only see variable results from SecureXL and not INSPECT
;- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


thanks, I forgot the -a parameter.
You can't use your Onliner either, because the strings are not included here. I have now created one that queries "int", "uint" and "string".
modinfo -p $PPKDIR/boot/modules/sim_kern*.o | sort -u | grep -E 'int param' | awk 'BEGIN {FS=":"} ; {print $1}' | xargs -i -n 1 fw ctl get int {} -a 2> /dev/null | grep PPAK | sed -r 's/PPAK 0://'; modinfo -p $PPKDIR/boot/modules/sim_kern*.o | sort -u | grep -E 'string param' | awk 'BEGIN {FS=":"} ; {print $1}' | xargs -i -n 1 fw ctl get string {} -a 2> /dev/null | grep PPAK | sed -r 's/PPAK 0://'
thanks, I forgot the -a parameter.
You can't use your Onliner either, because the strings are not included here. I have now created one that queries "int", "uint" and "string".
modinfo -p $PPKDIR/boot/modules/sim_kern*.o | sort -u | grep -E 'int param' | awk 'BEGIN {FS=":"} ; {print $1}' | xargs -i -n 1 fw ctl get int {} -a 2> /dev/null | grep PPAK | sed -r 's/PPAK 0://'; modinfo -p $PPKDIR/boot/modules/sim_kern*.o | sort -u | grep -E 'string param' | aw
...;
