Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Christopher_Ta1
Contributor
Jump to solution

CLI command to show FW/IPS Policy

What cli command to show all installed policy and also ips policy. 

(1)
2 Solutions

Accepted Solutions
XBensemhoun
Employee
Employee

Hi, you can use

cpstat fw

in order to find what policy package is installed on a Security Gateway.

For IPS, you'll have to use

ips stat

in order to check the ips status (active profile, update version, ...)

You can find such commands and lot more in the specific Admin Guide or on the CLI Reference Guide

Information Security enthusiast, CISSP, CCSP

View solution in original post

(1)
PhoneBoy
Admin
Admin

I don't remember saying that, but then again, I've probably forgotten more than I remember about Check Point Smiley Happy

You can look in $FWDIR/state/local/FW1 on the gateway...where you'll find all kinds of stuff.

View solution in original post

(1)
8 Replies
XBensemhoun
Employee
Employee

Hi, you can use

cpstat fw

in order to find what policy package is installed on a Security Gateway.

For IPS, you'll have to use

ips stat

in order to check the ips status (active profile, update version, ...)

You can find such commands and lot more in the specific Admin Guide or on the CLI Reference Guide

Information Security enthusiast, CISSP, CCSP
(1)
Christopher_Ta1
Contributor

I mean, show/list all the firewall policy not the install policy package

Danny
Champion Champion
Champion

You want to see all the rules that are installed on the local gateway, right? This is possible starting from R80.10. https://community.checkpoint.com/people/dwelccfe6e688-522c-305c-adaa-194bd7a7becc mentioned the file that contains all the rules a while ago. Let me check and get back to your shortly.

0 Kudos
PhoneBoy
Admin
Admin

I don't remember saying that, but then again, I've probably forgotten more than I remember about Check Point Smiley Happy

You can look in $FWDIR/state/local/FW1 on the gateway...where you'll find all kinds of stuff.

(1)
kamran_shabir
Explorer

On R80.10, you can not see Active IPS profile by using command " ips stat  " , use following command

# cat $FWDIR/state/local/AMW/local.set | grep -A15 malware_profiles | grep ":name" | awk '{print $2}' | tr -d "()"

 

Danny
Champion Champion
Champion

Instead of looking for specific commands, you could also install our

Common Check Point Commands (ccc)

script and have them always available by entering: ccc

JozkoMrkvicka
Mentor
Mentor

fw stat

for policy status.

Kind regards,
Jozko Mrkvicka
David_Azoulay
Employee Alumnus
Employee Alumnus

the following command will give you TP policy status:

fw stat -b AMW 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events