fw fetch

Syntax

Parameters

Parameter

Description

fw -d fetch...

Runs the command in debug mode.

Use only if you troubleshoot the command itself.

Best Practice - If you use this parameter, then redirect the output to a file, or use the script command to save the entire CLI session.

-c

Specifies that you fetch the policy from a peer ClusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Member.

Notes:

  • Must also use the "-f" parameter.

  • Works only in cluster.

-f

Specifies that you fetch the policy from a Management Server listed in the $FWDIR/conf/masters file.

-i

On a Security Gateway with dynamically assigned IP address (DAIP), specifies to ignore the SICClosed Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server. name and object name.

-n

Specifies not to load the fetched policy, if it is the same as the policy already located on the Security Gateway.

-nu

Specifies not to update the currently installed policy.

-r

On a Cluster Member, specifies to ignore this option in SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. Install Policy window:

Best Practice - Use this parameter if a peer Cluster Member is Down.

<Master 1> [<Master 2> ...]

Specifies the Check Point computer(s), from which to fetch the policy.

You can fetch the policy from the Management Server, or a peer Cluster Member.

Notes:

-d <Full Path to Directory>

Specifies the local directory on the Security Gateway, from which to fetch the policy files.