cpprod_util

Description

This utility lets you work with Check Point Registry ($CPDIR/registry/HKLM_registry.data) without manually opening it:

• Shows which Check Point products and features are enabled on this Check Point computer.
• Enables and disables Check Point products and features on this Check Point computer.

Syntax

cpprod_util CPPROD_GetValue "<Product>" "<Parameter>" {0|1}

cpprod_util CPPROD_SetValue "<Product>" "<Parameter>" {1|4} "<Value>" {0|1}

cpprod_util -dump

Parameters

Parameter	Description
CPPROD_GetValue	Gets the configuration status of the specified product or feature: 0 - Disabled 1 - Enabled
CPPROD_SetValue	Sets the configuration for the specified product or feature. Important - Do not run these command unless explicitly instructed by Check Point Support or R&D to do so.
"<Product>"	Specifies the product or feature.
"<Parameter>"	Specifies the configuration parameter for the specified product or feature.
"<Value>"	Specifies the value of the configuration parameter for the specified product or feature: One of these integers: 0, 1, 4 A string
dump	Creates a dump file of Check Point Registry ($CPDIR/registry/HKLM_registry.data) in the current working directory. The name of the output file is RegDump.

Notes

• On Multi-Domain Server, you must run this command in the context of the relevant Domain Management Server.
• If you run the cpprod_util command without parameters, it prints:
  • The list of all available products and features (for example, FwIsFirewallMgmt, FwIsLogServer, FwIsStandAlone)
  • The type of the expected argument when you configure a product or feature (no-parameter, string-parameter, or integer-parameter)
  • The type of the returned output (status-output, or no-output)
• To redirect the output of the cpprod_util command, you need to redirect the stderr to stdout:

  cpprod_util <options> > <output file> 2>&1

  Example: cpprod_util > /tmp/output_of_cpprod_util.txt 2>&1

Example 1 - Showing a list of all installed Check Point Products Packages on a Management Server

[Expert@MGMT:0]# cpprod_util CPPROD_GetInstalledProducts CPFC IDA MGMT FW1 SecurePlatform NGXCMP EdgeCmp SFWCMP SFWR75CMP SFWR77CMP FLICMP R75CMP R7520CMP R7540CMP R76CMP R77CMP PROVIDER-1 Reporting Module SmartLog CPinfo VSEC DIAG [Expert@MGMT:0]#

Example 2 - Checking if this Check Point computer is configured as a Management Server

[Expert@MGMT:0]# cpprod_util FwIsFirewallMgmt 1 [Expert@MGMT:0]#

Example 3 - Checking if this Check Point computer is configured as a StandAlone

[Expert@MGMT:0]# cpprod_util FwIsStandAlone 0 [Expert@MGMT:0]#

Example 4 - Checking if this Management Server is configured as a Primary in High Availability

[Expert@MGMT:0]# cpprod_util FwIsPrimary 1 [Expert@MGMT:0]#

Example 5 - Checking if this Management Server is configured as Active in High Availability

[Expert@MGMT:0]# cpprod_util FwIsActiveManagement 0 [Expert@MGMT:0]#

Example 6 - Checking if this Management Server is configured as Backup in High Availability

[Expert@MGMT:0]# cpprod_util FwIsSMCBackup 0 [Expert@MGMT:0]#

Example 7 - Checking if this Check Point computer is configured as a dedicated Log Server

[Expert@MGMT:0]# cpprod_util FwIsLogServer 0 [Expert@MGMT:0]

Example 8 - Checking if on this Management Server the SmartProvisioning blade is enabled

[Expert@MGMT:0]# cpprod_util FwIsAtlasManagement 1 [Expert@MGMT:0]#

Example 9 - Checking if on this Management Server the SmartEvent Server blade is enabled

[Expert@MGMT:0]# cpprod_util RtIsAnalyzerServer 1 [Expert@MGMT:0]#

Example 10 - Checking if on this Management Server the SmartEvent Correlation Unit blade is enabled

[Expert@MGMT:0]# cpprod_util RtIsAnalyzerCorrelationUnit 1 [Expert@MGMT:0]#

Example 11 - Checking if on this Management Server the Endpoint Policy Management blade is enabled

[Expert@MGMT:0]# cpprod_util UepmIsInstalled 1 [Expert@MGMT:0]#

Example 12 - Checking if this Management Server is configured as Endpoint Policy Server

[Expert@MGMT:0]# cpprod_util UepmIsPolicyServer 0 [Expert@MGMT:0]#