Useful Checkpoint Commands

Entering Expert Shell cpfirewall>expert
Exiting Expert Shell [Expert@cpfirewall:0]clish
Check FW Version
(Expert Mode)
fwm ver
Check HA Status
(Expert Mode)
cphaprob stat
Check When Policy Last Installed
(Expert Mode)
fw stat
Check Load of Each CPU
(Expert Mode)
cpstat -f multi_cpu os
Check Load of Each CPU Every Minute
(Expert Mode)
watch -n 1 "cpstat -f multi_cpu os"
Fetch Policy from CheckPoint Manager
(Expert Mode)
fw fetch <IP of CP manager>
Push Policy from CheckPoint Manager
(Expert Mode)
fwm load <Policy_Name> <Gateway_Name>
Directory where Checkpoint is installed
(Expert Mode)
cd $FWDIR
Forcing Failover – use the down command on the
current active gateway. Use cphaprob stat to check
other gateway is now active… use the up command
to bring the previous active gateway back to standby
clusterXL_admin down on current active
check ha status
clusterXL_admin up on what was active