The blog provides Network Security Tips, Tricks, How To/Procedures. Products and areas not limited to Firewalls, Security, Check Point, Cisco, Nokia IPSO, Crossbeam, SecurePlatform, SPLAT, IP Appliance, GAiA, Unix/Linux.

Check Point - Basic Information Gathering Command Reference

List of Check Point basic information gathering commands.

Command
Description
fw ver [-k]
fwm [mds] ver
vpn ver [-k]
fgate ver
Show major and minor version as well as build number and latest installed hotfix of a Check Point module. Show additional kernel version information with -k switch.
ver
Show CP version and build as well as kernel info.
cpshared_ver
Show the version of the SVN Foundation.
cpview
Tool combining several Check Point and Linux commands into a great text based tool providing both OS and software blade information.
fw stat
fw stat <-l|--long>
fw stat <-s|--short>
Show the name of the current policy and a brief interface list. Use -l or -s for more info. Consider using cpstat fw instead of -l or -s switch for better formatted output.
fw ctl iflist
Display interface list.
fw ctl arp [-n]
Display proxy arp table. -n disables name resolution.
cp_conf finger get
Display fingerprint on the management module.
cp_conf client get
Display GUI clients list.
cp_conf admin get
Display admin accounts and permissions. Also fwm -p
cp_conf auto get
<fw1|fg1|rm|all>
Display autostart state of Check Point modules.
fgate stat
Status and statistics of Flood-Gate-1.
fwaccel <stat|stats|conns>
View status, statistics or connection table of SecureXL.
fw getifs
Show list of configured interfaces with IP and netmask.
cpstat <app_flag> [-f flavour]
View OS, HW and CP application status. Issue cpstat without any options to see all possible application flags <app_flag> and corresponding flavours.
Examples: cpstat fw -f policy – verbose policy info
cpstat os -f cpu – CPU utilization statistics
cpinfo -y all
List all installed patches and hotfixes.
cpd_sched_config print
Show task scheduled with CPD scheduler.
enabled_blades
View enabled software blades
avsu_client [-app <app>]
get_version
Get signature version and status of content security <app>. Without the -app option “Anti Virus” is used.
show configuration
GAiA command to show running system configuration.
show commands
GAiA command to show all commands you are allowed to run.
show asset all
GAiA command to display general hardware information.
show sysenv all
GAiA command to display system component status (fans, power supply...)
asset
GAiA command to view hw info on IP Series Appliances running GAiA.
show asset hardware
GAiA command to view hw info like serial numbers in Nokia clish.
ipsctl -a
GAiA command to view hw info. Also see cat /var/etc/.nvram output.
 

Check Point - Basic Information Gathering Command Reference Check Point - Basic Information Gathering Command Reference Reviewed by Admin on 14:53:00 Rating: 5