- Products
- Learn
- Local User Groups
- Partners
- More
AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You
Blueprint Architecture for Securing
The AI Factory & AI Data Center
Call For Papers
Your Expertise. Our Stage
Good, Better, Best:
Prioritizing Defenses Against Credential Abuse
Ink Dragon: A Major Nation-State Campaign
Watch HereCheckMates Go:
CheckMates Fest
Good day.
Is there an equivalent embedded GAIA clish command to display Active Devices as seen in the GAIA portal? See below.
If not, what would be the best way to grab this information from the appliance without having to use a web browser?
Detected devices are conveniently stored in a SQLite database.
You can get the list using the following command in expert mode:
sqlite3 -column /flash/devices.db 'select name,ipAddr,macAddr,deviceOS,typeName,brand,model,ifName from devicesDb;'
Shay,
The field for the firewall interface name is ifName; see the last column in the output from my command.
You can see all the available columns with :
sqlite3 -column -header /flash/devices.db 'select * from devicesDb;'
Also, starting with firmware R81.10.15, the database is now located in /flash/devices.db_persistent.
"arp" is probably the closest thing.
Thanks. I think we landed on just using the info in /var/dhcp.leases.XX file for this. No real sure what the GAIA webui is doing on the Active Devices screen but it's inline with what is in the dhcp.leases file.
We did find nmap in the /pfrm2.0/bin/ directory. After investigating using nmap it was decided that cat'ing the dhcp.leases.XX was a much simpler solution.
On the appliance I'm looking on, I'm not using DHCP because the appliance is running in bridge mode.
arp can also be run without going to expert mode 🙂
Detected devices are conveniently stored in a SQLite database.
You can get the list using the following command in expert mode:
sqlite3 -column /flash/devices.db 'select name,ipAddr,macAddr,deviceOS,typeName,brand,model,ifName from devicesDb;'
how can i add a field that will show me the interface ? i want to recognize all wireless active devices via cli
Hi Shay,
you can run in expert mode: hosts -f
grep the result according to interface name you are looking for.
the command does not work on smb device - 1570
i tries in clish and in expert
Shay,
The field for the firewall interface name is ifName; see the last column in the output from my command.
You can see all the available columns with :
sqlite3 -column -header /flash/devices.db 'select * from devicesDb;'
Also, starting with firmware R81.10.15, the database is now located in /flash/devices.db_persistent.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Tue 28 Apr 2026 @ 06:00 PM (IDT)
Under the Hood: Securing your GenAI-enabled Web Applications with Check Point WAFTue 28 Apr 2026 @ 06:00 PM (IDT)
Under the Hood: Securing your GenAI-enabled Web Applications with Check Point WAFTue 12 May 2026 @ 10:00 AM (CEST)
The Cloud Architects Series: Check Point Cloud Firewall delivered as a serviceThu 30 Apr 2026 @ 03:00 PM (PDT)
Hillsboro, OR: Securing The AI Transformation and Exposure ManagementAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY