pep control

Description

Provides commands to control the PEP Check Point Firewall with Identity Awareness enabled that acts as Policy Enforcement Point: receives identities via identity sharing; redirects users to Captive Portal..

Syntax

pep control

extended_info_storage <options>

gbuf_cache <option>

identity_cache_mode status

kbuf_cache <option>

portal_dual_stack <options>

tasks_manager status <options>

Important:

In a Cluster Two or more Check Point Firewalls that work together in a redundant configuration - High Availability, or Load Sharing., you must configure all the Cluster Members in the same way.
On Scalable Platforms, you must run the applicable commands in the Expert mode on the applicable Security Group.
In the VSNext / Legacy VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Firewalls and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. mode, you must run the applicable commands in to the context of the applicable Virtual Gateway / Legacy Virtual System (vsenv <VS ID>).

Parameters

Parameter

Description

extended_info_storage <options>

Controls whether PEP stores the extended identities information for debug.

The available <options> are:

disable - PEP does not store the information.
enable - PEP stores the information.

gbuf_cache <option>

Controls the global buffer cache for Identity Awareness Software Blade on a Check Point Firewall that enforces network access and audits data based on network location, the identity of the user, and the identity of the computer. Acronym: IDA. kernel tables.

Warning - Do not change the default values, unless Check Point Support explicitly instructed you to do so.

The available <options> are:

Show the current status:

pep control gbuf_cache status

Enable the global buffer cache (this is the default):

pep control gbuf_cache enable

Disable the global buffer cache:

pep control gbuf_cache disable

Show the current memory limit for the global buffer cache:

pep control gbuf_cache memory_limit show

Configure the memory limit for the global buffer cache (default is 100 megabytes - 104,857,600 bytes):

pep control gbuf_cache memory_limit set <Number of Bytes>

identity_cache_mode status

Shows the current status of the Identity Cache Mode for the PDP Check Point Firewall with Identity Awareness enabled that acts as Policy Decision Point: acquires identities from identity sources; shares identities with other gateways.-to-PEP sharing protocol.

For more information, see the R82 Identity Awareness Administration Guide > Chapter "Advanced Identity Awareness Environment" > Section "Identity Cache Mode for Identity Sharing Protocols".

kbuf_cache <option>

Controls the kernel buffer cache for Identity Awareness kernel tables.

Warning - Do not change the default values, unless Check Point Support explicitly instructed you to do so.

The available <options> are:

Show the current status:

pep control kbuf_cache status

Enable the kernel buffer cache (this is the default):

pep control kbuf_cache enable

Disable the kernel buffer cache:

pep control kbuf_cache disable

Show the current memory limit for the kernel buffer cache:

pep control kbuf_cache memory_limit show

Configure the memory limit for the kernel buffer cache (default is 100 megabytes - 104,857,600 bytes):

pep control kbuf_cache memory_limit set <Number of Bytes>

portal_dual_stack <options>

Controls the support for portal dual stack (IPv4 and IPv6).

The available <options> are:

disable - Disables the support.
enable - Enables the support.

tasks_manager <options>

Shows the status of the PEP tasks (current running, previous, and pending tasks).

The available <options> are:

status - Shows the status.