CLI Script

You can create CLI scripts that control gateway settings, even settings that are not in the SMP WebUI. If you delete a script, its settings are kept on the gateways, unless those settings are configured in SMP. After the gateway receives the script from the SMP, it runs the script one time.

Note - This page can be accessed from the Gateways and Plans tabs.

Do not use the CLI to edit settings for an individual gateway that are remotely managed by a plan. If you do, the script fails.

For more about the supported Clish commands, see the Check Point Appliance CLI Guide for your appliance model.

You can override the CLI script settings set by a plan. You must first unlock the CLI script from the plan.

When the CLI script runs, any errors show in the Gateway's CLI Script page in the Last script result section.

You can configure a maximum of five different scripts. The gateway runs the scripts in sequential order: first Script1, then Script2, and so on.

To use a script in a plan:

1. Go to Home > Plans.

2. Click a plan name.

   The Edit page opens.

3. Click CLI Scripts > CLI Script 1 - 5.

4. Click Manage in SMP.

5. Enter the CLI commands for the script to run.

6. To disable the CLI script, clear Manage in SMP.

7. Click Save.

To override the script set by a plan in a gateway:

1. Go to Home > Gateways.

2. Click a gateway name.

   The Edit page opens.

3. Click CLI Script > CLI Script 1 - 5.

4. If the CLI script is locked, click Unlock from plan.

5. Select Manage in SMP.

6. Enter the CLI commands that you want the script to run.

7. To disable the CLI script, clear Manage in SMP.

8. Click Save.

   The gateway runs the CLI script, and the script in the plan is not run.