Command Line Reference

Below is a limited list of applicable commands.

These terms are used in the CLI commands:

Term	Description
PDP	Identity Awareness Software Blade on a Check Point Firewall that enforces network access and audits data based on network location, the identity of the user, and the identity of the computer. Acronym: IDA. Policy Decision Point. This is an Identity Awareness Security Gateway, which is responsible to collect and share identities.
PEP	Identity Awareness Policy Enforcement Point. This is an Identity Awareness Security Gateway, which is responsible to enforce network access restrictions. It makes its decisions based on identity data it collected from the PDP.
ADLOG	The module responsible for the acquisition of identities of entities (users or computers) from the Active Directory. The `adlog` runs on: An Identity Awareness Security Gateway, for which you enabled the AD Query Check Point clientless identity acquisition tool. It is based on Active Directory integration and it is completely transparent to the user. The technology is based on querying the Active Directory Security Event Logs and extracting the user and computer mapping to the network address from them. It is based on Windows Management Instrumentation (WMI), a standard Microsoft protocol. The Check Point Firewall with Identity Awareness enabled communicates directly with the Active Directory domain controllers and does not require a separate server. No installation is necessary on the clients, or on the Active Directory server.. The AD Query serves the Identity Awareness Software Blade Specific security solution (module): (1) On a Check Point Firewall, each Software Blade inspects specific characteristics of the traffic (2) On a Management Server, each Software Blade enables different management capabilities., which enforces the policy and logs identities. A Log Server Dedicated Check Point server that runs Check Point software to store and process logs.. The `adlog` logs identities. The `adlog` is the command line process used to control and monitor the ADLOG feature. The command line tool helps control users' statuses, as well as troubleshoot and monitor the system.

Term

Description

PDP

Identity Awareness Software Blade on a Check Point Firewall that enforces network access and audits data based on network location, the identity of the user, and the identity of the computer. Acronym: IDA. Policy Decision Point.

This is an Identity Awareness Security Gateway, which is responsible to collect and share identities.

PEP

Identity Awareness Policy Enforcement Point.

This is an Identity Awareness Security Gateway, which is responsible to enforce network access restrictions.

It makes its decisions based on identity data it collected from the PDP.

ADLOG

The module responsible for the acquisition of identities of entities (users or computers) from the Active Directory.

The adlog runs on:

An Identity Awareness Security Gateway, for which you enabled the AD Query Check Point clientless identity acquisition tool. It is based on Active Directory integration and it is completely transparent to the user. The technology is based on querying the Active Directory Security Event Logs and extracting the user and computer mapping to the network address from them. It is based on Windows Management Instrumentation (WMI), a standard Microsoft protocol. The Check Point Firewall with Identity Awareness enabled communicates directly with the Active Directory domain controllers and does not require a separate server. No installation is necessary on the clients, or on the Active Directory server..

The AD Query serves the Identity Awareness Software Blade Specific security solution (module): (1) On a Check Point Firewall, each Software Blade inspects specific characteristics of the traffic (2) On a Management Server, each Software Blade enables different management capabilities., which enforces the policy and logs identities.
A Log Server Dedicated Check Point server that runs Check Point software to store and process logs.. The adlog logs identities.

The adlog is the command line process used to control and monitor the ADLOG feature.

The command line tool helps control users' statuses, as well as troubleshoot and monitor the system.

The PEP and PDP processes are key components of the system. Through them, administrators control user access and network protection.

Important:

In a Cluster Two or more Check Point Firewalls that work together in a redundant configuration - High Availability, or Load Sharing., you must configure all the Cluster Members in the same way.
On Scalable Platforms, you must run the applicable commands in the Expert mode on the applicable Security Group.
In the VSNext / Legacy VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Firewalls and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. mode, you must run the applicable commands in to the context of the applicable Virtual Gateway / Legacy Virtual System (vsenv <VS ID>).