Check Point - VPN - View/Delete IKE SA & IPsec SA - CLI

VPN tunnel utility can be used to view or delete all IKE SAs, all IPsec SAs, all IKE SAs for a given peer (GW) or user (Client) and  all IPsec SAs for a given peer (GW) or user (Client).

Syntax:

vpn tunnelutil
(also: vpn tu)

Example:

CheckPoint-GW> vpn tu

**********     Select Option     **********

(1)             List all IKE SAs
(2)             List all IPsec SAs
(3)             List all IKE SAs for a given peer (GW) or user (Client)
(4)             List all IPsec SAs for a given peer (GW) or user (Client)
(5)             Delete all IPsec SAs for a given peer (GW)
(6)             Delete all IPsec SAs for a given User (Client)
(7)             Delete all IPsec+IKE SAs for a given peer (GW)
(8)             Delete all IPsec+IKE SAs for a given User (Client)
(9)             Delete all IPsec SAs for ALL peers and users
(0)             Delete all IPsec+IKE SAs for ALL peers and users

(Q)             Quit

*******************************************

CheckPoint-GW>