cpstop

Description

Manually stops all Check Point processes and applications.

Syntax on a Security Gateway / Cluster Member in Gaia Clish or the Expert mode

cpstop [-fwflag {-default | -proc | -driver}]

Syntax on a Scalable Platform Security Group in Gaia gClish

cpstop [-fwflag {-default | -proc | -driver}]

Syntax on a Scalable Platform Security Group in the Expert mode

g_all cpstop [-fwflag {-default | -proc | -driver}]

Parameters

Important - These parameters are for Check Point internal use. Do not use them, unless explicitly instructed by Check Point Support or R&D to do so.

Parameter

Description

-fwflag -default

  • Shuts down Check Point processes

  • Loads the Default Filter policy (defaultfilter)

-fwflag -proc

  • Shuts down Check Point processes

  • Keeps the currently loaded kernel policy

  • Maintains the Connections table, so that after you run the cpstart command, you do not experience dropped packets because they are "out of state"

Note - Only security rules that do not use user space processes continue to work.

-fwflag -driver

Unloads the Check Point kernel modules.

Therefore, no policy is loaded.

Warning - This leaves your Security Gateway / Cluster Member / Security Group Members without protection. Before you run this command, we recommend to disconnect your Security Gateway / Cluster Member / Security Group Members from the network completely.

Example

See these articles: