Manually stops all Check Point processes and applications.

Syntax on a Security Gateway / Cluster Member in Gaia Clish or the Expert mode

cpstop [-fwflag {-default | -proc | -driver}]

Syntax on a Scalable Platform Security Group in Gaia gClish

cpstop [-fwflag {-default | -proc | -driver}]

Syntax on a Scalable Platform Security Group in the Expert mode

g_all cpstop [-fwflag {-default | -proc | -driver}]


Important - These parameters are for Check Point internal use. Do not use them, unless explicitly instructed by Check Point Support or R&D to do so.



-fwflag -default

-fwflag -proc

  • Shuts down Check Point processes

  • Keeps the currently loaded kernel policy

  • Maintains the Connections table, so that after you run the cpstart command, you do not experience dropped packets because they are "out of state"

Note - Only security rules that do not use user space processes continue to work.

-fwflag -driver

Unloads the Check Point kernel modules.

Therefore, no policy is loaded.

Warning - This leaves your Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources., or a Cluster MemberClosed Security Gateway that is part of a cluster. without protection. Before you run this command, we recommend to disconnect your Security Gateway, or a ClusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Member from the network completely.