cpstop

Description

Manually stops all Check Point processes and applications.

Syntax on a Security Gateway / Cluster Member in Gaia Clish or the Expert mode

cpstop [-fwflag {-default | -proc | -driver}]

Syntax on a Scalable Platform Security Group in Gaia gClish

cpstop [-fwflag {-default | -proc | -driver}]

Syntax on a Scalable Platform Security Group in the Expert mode

g_all cpstop [-fwflag {-default | -proc | -driver}]

Parameters

Important - These parameters are for Check Point internal use. Do not use them, unless explicitly instructed by Check Point Support or R&D to do so.

Parameter

Description

-fwflag -default

Shuts down State of a Cluster Member during a failure when one of the Critical Devices reports its state as "problem": In ClusterXL, applies to the state of the Security Gateway component; in 3rd-party / OPSEC cluster, applies to the state of the State Synchronization mechanism. A Cluster Member in this state does not process any traffic passing through cluster. Check Point processes
Loads the Default Filter policy (defaultfilter)

-fwflag -proc

Shuts down Check Point processes
Keeps the currently loaded kernel policy
Maintains the Connections table, so that after you run the cpstart command, you do not experience dropped packets because they are "out of state"

Note - Only security rules that do not use user space processes continue to work.

-fwflag -driver

Unloads the Check Point kernel modules.

Therefore, no policy is loaded.

Warning - This leaves your Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources., or a Cluster Member Security Gateway that is part of a cluster. without protection. Before you run this command, we recommend to disconnect your Security Gateway, or a Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Member from the network completely.