fwaccel synatk

Description

The fwaccel synatk and fwaccel6 synatk commands control the Accelerated SYN Defender on the local Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources., or Cluster Member Security Gateway that is part of a cluster..

Important:

See sk120476 for information about the 'SYN Attack' protection in SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on..
In a Scalable Platform, the same SecureXL Check Point product on a Security Gateway that accelerates IPv4 and IPv6 traffic that passes through a Security Gateway. command must run on all Security Group A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected. Members.

Therefore, you must run the SecureXL commands in either Gaia gClish The name of the global command line shell in Check Point Gaia operating system for Security Appliances connected to Check Point Quantum Maestro Orchestrators and for Security Gateway Modules on Scalable Chassis. Commands you run in this shell apply to all Security Gateway Module / Security Appliances in the Security Group., or Expert mode.
- In Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. gClish, run the "fwaccel ..." and "fwaccel6 ..." commands.
- In the Expert mode, run the "g_fwaccel ..." and "g_fwaccel6 ..." commands.
In a Scalable Platform, when you add a new Security Group Member to a Security Group, the new Security Group Member pulls the "fwaccel synatk" configuration that you saved it in a configuration file - in the default file $FWDIR/conf/synatk.conf, or in the file specified with the "fwaccel synatk -c" command.

Syntax for IPv4

fwaccel synatk

-a

-c <options>

-d

-e

-g

-m

-t <options>

config

monitor <options>

state <options>

whitelist <options>

Syntax for IPv6

fwaccel6 synatk

-a

-c <options>

-d

-e

-g

-m

-t <options>

config

monitor <options>

state <options>

whitelist <options>

Parameters

Parameter	Description
No Parameters	Shows the applicable built-in usage.
`-a`	Applies the configuration from the default file. See fwaccel synatk -a.
`-c <options>`	Applies the configuration from the specified file. See fwaccel synatk -c <Configuration File>.
`-d`	Disables the Accelerated SYN Defender on all interfaces. See fwaccel synatk -d.
`-e`	Enables the Accelerated SYN Defender on interfaces with topology "External". Enables the Accelerated SYN Defender in Monitor (Detect only) mode on interfaces with topology "Internal". See fwaccel synatk -e.
`-g`	Enables the Accelerated SYN Defender on all interfaces. See fwaccel synatk -g.
`-m`	Enables the Accelerated SYN Defender in Monitor (Detect only) mode on all interfaces. In this state, the Accelerated SYN Defender only sends a log when it recognizes a TCP SYN Flood attack. See fwaccel synatk -m.
`-t <options>`	Configures the threshold numbers of half-opened TCP connections that trigger the Accelerated SYN Defender. See fwaccel synatk -t <Threshold>.
`config`	Shows the current Accelerated SYN Defender configuration. See fwaccel synatk config.
`monitor <options>`	Shows the Accelerated SYN Defender status. See fwaccel synatk monitor.
`state <options>`	Controls the Accelerated SYN Defender states. See fwaccel synatk state.
`whitelist <options>`	Controls the Accelerated SYN Defender whitelist. See fwaccel synatk allow.