cpprod_util

Description

This utility lets you work with Check Point Registry ($CPDIR/registry/HKLM_registry.data) without manually opening it:

• Shows which Check Point products and features are enabled on this Check Point computer.
• Enables and disables Check Point products and features on this Check Point computer.

Syntax

cpprod_util CPPROD_GetValue "<Product>" "<Parameter>" {0|1}

cpprod_util CPPROD_SetValue "<Product>" "<Parameter>" {1|4} "<Value>" {0|1}

cpprod_util -dump

Parameters

Parameter	Description
CPPROD_GetValue	Gets the configuration status of the specified product or feature: 0 - Disabled 1 - Enabled
CPPROD_SetValue	Sets the configuration for the specified product or feature. Important - Do not run these commands unless instructed so explicitly by Check Point Support or R&D.
"<Product>"	Specifies the product or feature.
"<Parameter>"	Specifies the configuration parameter for the specified product or feature.
"<Value>"	Specifies the value of the configuration parameter for the specified product or feature: One of these integers: 0, 1, 4 A string
dump	Creates a dump file of Check Point Registry ($CPDIR/registry/HKLM_registry.data) in the current working directory. The name of the output file is RegDump.

Notes

• If you run the cpprod_util command without parameters, it prints:
  • The list of all available products and features (for example, FwIsFirewallModule, FwIsVSX, FwIsStandAlone)
  • The type of the expected argument when you configure a product or feature (no-parameter, string-parameter, or integer-parameter)
  • The type of the returned output (status-output, or no-output)
• By default, this command prints to the stderr. Therefore, to redirect the output of this command to a file, you must redirect the stderr to stdout:

  cpprod_util <options> > <output file> 2>&1

  Example: cpprod_util > /tmp/output_of_cpprod_util.txt 2>&1

Example 1- Showing a list of all installed Check Point Products Packages on a Security Gateway

[Expert@MyGW:0]# cpprod_util CPPROD_GetInstalledProducts CPFC IDA MGMT FW1 SecurePlatform CPinfo DIAG PPACK CVPN [Expert@MyGW:0]#

Example 2 - Checking if this Check Point computer is configured as a StandAlone

[Expert@MyGW:0]# cpprod_util FwIsStandAlone 0 [Expert@MyGW:0]#

Example 3 - Checking if this Security Gateway is configured as a Cluster Member

[Expert@MyGW:0]# cpprod_util FwIsHighAvail 1 [Expert@MyGW:0]#

Example 4 - Checking if this Security Gateway is configured as a VSX Gateway

[Expert@MyGW:0]# cpprod_util FwIsVSX 0 [Expert@MyGW:0]#

Example 5 - Checking if on this Security Gateway the <QoS> blade is enabled

[Expert@MyGW:0]# cpprod_util FwIsFloodGate 1 [Expert@MyGW:0]#

Example 6 - Checking if on this Security Gateway the SmartProvisioning is enabled

[Expert@MyGW:0]# cpprod_util FwIsAtlasModule 0 [Expert@MyGW:0]#

Example 7 - Checking if this Security Gateway is configured in Bridge Mode

[Expert@MyGW:0]# cpprod_util FwIsBridge 0 [Expert@MyGW:0]#

Example 8 - Checking if this Security Gateway is a member of Full HA cluster

[Expert@MyGW:0]# cpprod_util FwIsFullHA 0 [Expert@MyGW:0]#

Example 9 - Checking if this Security Gateway is configured with Dynamically Assigned IP (DAIP)

[Expert@MyGW:0]# cpprod_util FwIsDAG 0 [Expert@MyGW:0]#

Example 10 - Checking if this Security Gateway is configured with IPv6 addresses

[Expert@MyGW:0]# cpprod_util FwIsFireWallIPv6 1 [Expert@MyGW:0]#