fw ctl chain

Description

Shows the list of Firewall Chain Modules.

This list shows various inspection Chain Modules, through which the traffic passes on this Security Gateway.

The available Chain Modules depend on the configuration and enabled Software Blades.

Important:

  • You can run this command in the Expert mode or in Gaia Clish (Gaia gClish on Scalable Platforms).

  • In a Cluster, you must configure all the Cluster Members in the same way.

  • On Scalable Platforms (ElasticXL, Maestro, and Chassis), you must connect to the Gaia Portal of the applicable Security Group.

Syntax

fw [-d] ctl chain

Parameters

Parameter

Description

-d

Runs the command in debug mode.

Use only if you troubleshoot the command itself.

Best Practice - If you use this parameter, then redirect the output to a file, or use the script command to save the entire CLI session.

Example

[Expert@MyGW:0]# fw ctl chain
in chain (23):
        0: -7fffffff (0000000000000000) (00000000) SecureXL inbound (sxl_in)
        1: -7ffffffe (0000000000000000) (00000000) SecureXL inbound CT (sxl_ct)
        2: -7f800000 (ffffffff8b6812b0) (ffffffff) IP Options Strip (in) (ipopt_strip)
        3: -7d000000 (ffffffff8a96ee80) (00000003) vpn multik forward in
        4: - 2000000 (ffffffff8a97d830) (00000003) vpn decrypt (vpn)
        5: - 1fffffa (ffffffff8a9533a0) (00000001) l2tp inbound (l2tp)
        6: - 1fffff8 (ffffffff8b67f0e0) (00000001) Stateless verifications (in) (asm)
        7: - 1fffff7 (ffffffff8b67ec00) (00000001) fw multik misc proto forwarding
        8: - 1fffff2 (ffffffff8a982aa0) (00000003) vpn tagging inbound (tagging)
        9: - 1fffff0 (ffffffff8a983460) (00000003) vpn decrypt verify (vpn_ver)
        10:         0 (ffffffff8b85a950) (00000001) fw VM inbound  (fw)
        11:         1 (ffffffff8a97ed70) (00000003) vpn policy inbound (vpn_pol)
        12:         2 (ffffffff8b681700) (00000001) fw SCV inbound (scv)
        13:         3 (ffffffff8a982130) (00000003) vpn before offload (vpn_in)
        14:         4 (ffffffff8b0fa5c0) (00000003) QoS inbound offload chain module
        15:         5 (ffffffff8b574730) (00000003) fw offload inbound (offload_in)
        16:        10 (ffffffff8b84c9c0) (00000001) fw post VM inbound  (post_vm)
        17:    100000 (ffffffff8b807970) (00000001) fw accounting inbound (acct)
        18:  22000000 (ffffffff8b0fbfc0) (00000003) QoS slowpath inbound chain mod (fg_sched)
        19:  7f730000 (ffffffff8b3d3aa0) (00000001) passive streaming (in) (pass_str)
        20:  7f750000 (ffffffff8b17dff0) (00000001) TCP streaming (in) (cpas)
        21:  7f800000 (ffffffff8b681260) (ffffffff) IP Options Restore (in) (ipopt_res)
        22:  7fb00000 (ffffffff8a9fe8a0) (00000001) Cluster Late Correction (ha_for)
out chain (19):
        0: -7f800000 (ffffffff8b6812b0) (ffffffff) IP Options Strip (out) (ipopt_strip)
        1: -78000000 (ffffffff8a96ee60) (00000003) vpn multik forward out
        2: - 1ffffff (ffffffff8a97fb70) (00000003) vpn nat outbound (vpn_nat)
        3: - 1fffff0 (ffffffff8b168640) (00000001) TCP streaming (out) (cpas)
        4: - 1ffff50 (ffffffff8b3d3aa0) (00000001) passive streaming (out) (pass_str)
        5: - 1ff0000 (ffffffff8a982aa0) (00000003) vpn tagging outbound (tagging)
        6: - 1f00000 (ffffffff8b67f0e0) (00000001) Stateless verifications (out) (asm)
        7:         0 (ffffffff8b85a950) (00000001) fw VM outbound (fw)
        8:        10 (ffffffff8b84c9c0) (00000001) fw post VM outbound  (post_vm)
        9:   2000000 (ffffffff8a982900) (00000003) vpn policy outbound (vpn_pol)
        10:  15000000 (ffffffff8b0fac30) (00000003) QoS outbound offload chain modul (fg_pol)
        11:  1ffffff0 (ffffffff8a951790) (00000001) l2tp outbound (l2tp)
        12:  20000000 (ffffffff8a978280) (00000003) vpn encrypt (vpn)
        13:  21000000 (ffffffff8b0fbfc0) (00000003) QoS slowpath outbound chain mod (fg_sched)
        14:  7f000000 (ffffffff8b807970) (00000001) fw accounting outbound (acct)
        15:  7f700000 (ffffffff8b17cb10) (00000001) TCP streaming post VM (cpas)
        16:  7f800000 (ffffffff8b681260) (ffffffff) IP Options Restore (out) (ipopt_res)
        17:  7f900000 (0000000000000000) (00000000) SecureXL outbound (sxl_out)
        18:  7fa00000 (0000000000000000) (00000000) SecureXL deliver (sxl_deliver)
[Expert@MyGW:0]#