fw [-d] ctl

arp <options>

bench <options>

block <options>

chain

conn

conntab <options>

cpasstat <options>

debug <options>

get <options>

iflist

install

kdebug <options>

pstat <options>

set <options>

tcpstrstat <options>

uninstall

-d

Runs the command in debug mode.

Use only if you troubleshoot the command itself.

arp <options>

Shows the configured Proxy ARP entries based on the $FWDIR/conf/local.arp file on the Security Gateway.

bench <options>

Runs the CPU benchmark tests that collect these statistics:

• FireWall Lock Statistics
• Outbound Packets Statistics
• Inbound Packets Statistics.

block <options>

Blocks all connections to, from, and through the Security Gateway.

chain

Shows the list of Firewall Chain Modules.

conn

Shows the list of Firewall Connection Modules.

conntab <options>

Shows formatted list of current connections from the Connections kernel table (ID 8158).

cpasstat <options>

Generates statistics report about Check Point Active Streaming (CPAS).

debug <options>

Generates kernel debug messages from Check Point Firewall kernel to a debug buffer.

dlpkstat <options>

Generates statistics report about Data Loss Prevention kernel module.

get <options>

Shows the value of the specified kernel parameter.

iflist

Shows the list with this information:

• The name of interfaces, to which the Check Point Firewall kernel attached.
• The internal numbers of the interfaces in the Check Point Firewall kernel.

install

Tells the operating system to start passing packets to Firewall.

kdebug <options>

Generates kernel debug messages from Check Point Firewall kernel to a debug buffer.

leak <options>

Generates leak detection report.

pstat <options>

Shows Security Gateway various internal statistics.

set <options>

Configures the specified value for the specified kernel parameter.

tcpstrstat <options>

Generates statistics report about TCP Streaming.

uninstall

Tells the operating system to stop passing packets to Firewall, and unloads the current Security Policy.