cpstop

Description

Manually stops all Check Point processes and applications.

Syntax

cpstop [-fwflag {–default | -proc | -driver}]

Parameters

Important - These parameters are for Check Point internal use. To not use them, unless Check Point Support explicitly instructs you to do so.

Parameter	Description
`-fwflag –default`	Shuts down Check Point processes Loads the Default Filter policy (`defaultfilter`)
`-fwflag -proc`	Shuts down Check Point processes Keeps the currently loaded kernel policy Maintains the Connections table, so that after you run the `cpstart` command, you do not experience dropped packets because they are "out of state" Note - Only security rules that do not use user space processes continue to work.
`-fwflag -driver`	Unloads the Check Point kernel modules. Therefore, no policy is loaded. Important - This leaves your Security Gateway, or a Cluster Member without protection. Before you run this command, we recommend to disconnect your Security Gateway, or a Cluster Member from the network completely.

Parameter

Description

-fwflag –default

Shuts down Check Point processes
Loads the Default Filter policy (defaultfilter)

-fwflag -proc

Shuts down Check Point processes
Keeps the currently loaded kernel policy
Maintains the Connections table, so that after you run the cpstart command, you do not experience dropped packets because they are "out of state"

Note - Only security rules that do not use user space processes continue to work.

-fwflag -driver

Unloads the Check Point kernel modules.

Therefore, no policy is loaded.

Important - This leaves your Security Gateway, or a Cluster Member without protection. Before you run this command, we recommend to disconnect your Security Gateway, or a Cluster Member from the network completely.

Example

See these articles: