Check Point R80.20 - Cpwd

To Next Page

To Previous Page

Command Line Reference

Next Generation Security Gateway Guide R80.20 | 367

cpwd_admin exist

Description

• Checks whether the WatchDog process cpwd is alive.

Syntax

cpwd_admin exist

Example

[Expert@HostName:0]# cpwd_admin exist

cpwd_admin: cpWatchDog is running

[Expert@HostName:0]#

Main Page

Important Information3
Smartconsole Toolbars5
Table of Contents7
Terms16
Check Point Next Generation Security Gateway Solution18
Overview of Firewall Features18
How to Use this Guide18
Components of the Check Point Firewall Solution20
Mirror and Decrypt21
Introduction to Mirror and Decrypt21
Mirror and Decrypt Requirements24
Configuring Mirror and Decrypt in Gateway Mode25
Preparing the Security Gateway26
Configuring Mirror and Decrypt in Smartconsole27
Configuring Mirror and Decrypt in VSX Mode32
Preparing the VSX Gateway34
Configuring Mirror and Decrypt in Smartconsole for One Virtual System35
Configuring Mirror and Decrypt in Smartconsole for Several Virtual Systems40
Mirror and Decrypt Logs45
ICAP Client46
Introduction to ICAP46
ICAP Client in Check Point Security Gateway51
ICAP Client User Disclaimer52
Configuring ICAP Client in Gateway Mode53
Configuring ICAP Client in VSX Mode54
The ICAP Client Configuration File55
Example of the ICAP Client Configuration File67
Advanced ICAP Client Configuration70
Configuring Additional ICAP Response Headers for Enforcement70
Configuring Additional HTTPS Status Code, Which ICAP Client Sends in RESPMOD76
Configuring Connection Timeout for ICAP Connections78
Configuring ICAP Client Data Trickling Parameters79
Hardware Security Module (HSM)82
Why Use an HSM82
The Check Point Environment with Gemalto Safenet HSM Appliance83
Workflow for Setting up Your HSM Environment83
Step 1: Extracting the Gemalto Help Package84
Step 2: Configuring the Gemalto HSM Appliance Server to Work with Check Point Security Gateway84
Step 3: Configuring the Gemalto HSM Client Workstation85
Step 4: Creating the CA Certificate on the Gemalto HSM Appliance Server86
Step 5: Configuring the Check Point Security Gateway to Work with the Gemalto HSM Appliance Server87
(A) Installing the Gemalto HSM Simplified Client Software Packages on the Check Point Security Gateway88
(B) Establishing a Trust Link between the Check Point Security Gateway and the Gemalto HSM Appliance Server88
Configuring HTTPS Inspection on the Check Point Security Gateway to Work with the Gemalto HSM Appliance Server90
Additional Actions for a Gemalto HSM Appliance Server91
Disabling Communication from the Check Point Gateway to the Gemalto HSM Appliance Server91
Deleting a Trust Link with the HSM Appliance Server91
Configuring a Second Interface on a Gemalto HSM Appliance for NTLS92
Monitoring HTTPS Inspection on Check Point Gateway When Working with the Gemalto HSM Appliance Server92
Smartconsole Logs93
Snmp95
Cpstat Https_Inspection101
Creating an Access Control Policy107
Managing Gateways107
Manually Updating the Gateway Topology107
Dynamically Updating the Topology107
Introducing the Unified Access Control Policy108
Creating a Basic Access Control Policy109
Basic Rules109
Use Case - Basic Access Control109
Use Case - Inline Layer for each Department110
Creating Application Control and URL Filtering Rules112
Monitoring Applications112
Blocking Applications and Informing Users113
Limiting Application Traffic113
Using Identity Awareness Features in Rules114
Blocking Sites115
Blocking URL Categories116
Ordered Layers and Inline Layers117
The Need for Ordered Layers and Inline Layers117
Order of Rule Enforcement in Inline Layers117
Order of Rule Enforcement in Ordered Layers118
Creating an Inline Layer119
Creating a Ordered Layer120
Enabling Access Control Features121
Types of Rules in the Rule Base122
Administrators for Access Control Layers124
Sharing Layers124
Visual Division of the Rule Base with Sections125
Exporting Layer Rules to a .CSV File125
Managing Policies and Layers125
The Columns of the Access Control Rule Base126
Source and Destination Column126
VPN Column127
Services & Applications Column128
Content Column131
Actions Column132
Tracking Column134
Unified Rule Base Use Cases134
Use Case - Application Control and Content Awareness Ordered Layer134
Use Case - Inline Layer for Web Traffic135
Use Case - Content Awareness Ordered Layer136
Use Case - Application & URL Filtering Ordered Layer138
Rule Matching in the Access Control Policy139
Examples of Rule Matching139
Best Practices for Access Control Rules142
Installing the Access Control Policy143
Analyzing the Rule Base Hit Count144
Enabling or Disabling Hit Count144
Configuring the Hit Count Display145
Preventing IP Spoofing146
Configuring Anti-Spoofing146
Anti-Spoofing Options148
Translating IP Addresses (NAT)148
To Learn more about NAT149
Usercheck Interactions in the Access Control Policy149
Configuring the Security Gateway for Usercheck149
Blocking Applications and Informing Users151
Usercheck for Access Control Default Messages151
Creating a Usercheck Interaction Object152
Example Usercheck Message Using Field Variables153
Localizing and Customizing the Usercheck Portal153
Usercheck Frequency and Scope153
Usercheck Settings154
Usercheck CLI155
Revoking Incidents156
Usercheck Client157
Blade Settings165
Inspection Settings165
Configuring Inspection Settings165
Creating a Threat Prevention Policy168
Threat Prevention Components168
Ips169
Anti-Bot170
Anti-Virus171
Sandblast172
Assigning Administrators for Threat Prevention174
Analyzing Threats174
Out-Of-The-Box Protection from Threats175
Getting Quickly up and Running with the Threat Prevention Policy175
Enabling the Threat Prevention Software Blades175
Installing the Threat Prevention Policy178
Introducing Profiles178
Optimized Protection Profile Settings179
Predefined Rule180
The Threat Prevention Policy181
Workflow for Creating a Threat Prevention Policy181
Threat Prevention Policy Layers181
Threat Prevention Rule Base183
Creating Threat Prevention Rules184
Configuring IPS Profile Settings184
Blocking Viruses185
Configuring Anti-Bot Settings186
Configuring Threat Emulation Settings188
Configuring Threat Extraction Settings191
Configuring a Malware DNS Trap192
Exception Rules193
The Check Point Threatcloud195
Updating IPS Protections196
Threat Prevention Scheduled Updates197
Updating Threat Emulation197
To Learn more about Threat Prevention197
Creating Shared Policies198
Shared Policies198
Configuring HTTPS Inspection199
Inspecting HTTPS Packets199
Configuring Gateways to Inspect Outbound and Inbound HTTPS200
Configuring the Geo Policy208
Adding Users to the Policy210
Using Identity Awareness210
Identity Sources210
Enabling Identity Awareness211
Creating Access Roles212
Using Identity Awareness in the Access Control Policy213
Redirecting to a Captive Portal214
Sample Identity Awareness Rules214
Using User Directory216
User Directory Features216
Deploying User Directory216
Account Units217
Working with LDAP Account Units217
Enabling User Directory220
Managing LDAP Information220
To Learn more about Adding Users to the Policy221
Logging and Monitoring222
Log Analysis223
Configuring Logging223
Enabling Log Indexing225
Sample Log Analysis226
Tracking Options227
Log Sessions229
Views and Reports230
Enabling Views and Reports231
Catalog of Views and Reports231
Views232
Reports232
Automatic View and Report Updates234
Opening a View or Report235
Exporting Views and Reports235
Scheduling a View or Report236
To Learn more about Logging and Monitoring236
Maximizing Network Performance and Redundancy238
Solutions for Enhancing Network Performance and Redundancy238
Corexl238
Configuring Corexl239
To Learn more about Corexl239
About Securexl239
Configuring Securexl241
To Learn more about Securexl242
Multi-Queue242
Clusterxl243
The Need for Clusters243
Clusterxl Solution243
Ipv6 Support for Clusterxl244
How Clusterxl Works244
Installation and Platform Support244
High Availability and Load Sharing in Clusterxl245
Configuring Clusterxl253
VRRP Cluster257
How VRRP Failover Works258
Internal Network High Availability258
Preparing a VRRP Cluster260
Configuring Monitored Circuit/Simplified VRRP - Gaia Portal262
Configuring the VRRP Security Gateway Cluster in Smartconsole264
Configuring VRRP Rules for the Security Gateway265
To Learn more about Maximizing Network Performance265
Simplifying Security for Private Clouds266
Introduction to Virtual Systems (VSX)266
VSX Overview266
How VSX Works267
VSX Architecture and Concepts269
Virtual Devices270
Interfaces271
VSX Clusters272
Configuring a VSX Cluster275
An Example VSX Cluster275
Step 1 - Creating a VSX Cluster276
Step 2 - Creating a Virtual Switch279
Step 3 - Creating Virtual System 1279
Step 4 - Creating a New Virtual System 2280
Step 5 - Configuring the Policy on the Virtual Systems280
To Learn more about VSX281
Securing Data282
Overview282
Data Loss Prevention Features282
Using a Mail Relay and Mail Server283
Enabling DLP283
Adding Data Owners284
Notifying Data Owners284
Using DLP with Microsoft Exchange285
DLP Rule Base286
Managing the DLP Rule Base286
DLP Rule Exceptions287
DLP Rule Actions287
Sample Rule Base288
Analyzing and Tracking DLP288
Analyzing DLP Incidents in the Logs289
Event Analysis Views Available in Smartconsole289
To Learn more about Data Loss Prevention289
Connectcontrol - Server Load Balancing291
Connectcontrol Packet Flow291
Logical Server Types292
Persistent Server Mode292
Persistent Server Timeout293
Load-Balancing Methods293
Server Availability294
End to End Connectcontrol294
Ipv6 Neighbor Discovery296
Managing Ethernet Protocols296
Deploying a Security Gateway in Monitor Mode298
Configuring Link State Propagation (LSP)299
Troubleshooting Specific Problems302
Resetting SIC in Security Gateways302
Security before Firewall Activation303
Boot Security304
Control of IP Forwarding on Boot304
The Default Filter304
Selecting the Default Filter305
Defining a Custom Default Filter306
Using the Default Filter for Maintenance307
The Initial Policy308
Monitoring Security309
Unloading Default Filter or Initial Policy310
Troubleshooting: Cannot Complete Reboot311
Command Line Reference312
Comp_Init_Policy313
Control_Bootsec317
Cp_Conf320
Cp_Conf Auto322
Cp_Conf Corexl323
Cp_Conf Fullha325
Cp_Conf Ha326
Cp_Conf Intfs327
Cp_Conf Lic328
Cp_Conf Sic330
Cpconfig331
Cpinfo334
Cplic335
Cplic Check337
Cplic Contract339
Cplic del340
Cplic Print341
Cplic Put342
Cpprod_Util344
Cpstart347
Cpstat348
Cpstop355
Cpview356
Overview of Cpview356
Cpview User Interface356
Using Cpview356
Dynamic_Objects358
Cpwd_Admin360
Cpwd_Admin Config362
Cpwd_Admin del365
Cpwd_Admin Detach366
Cpwd_Admin Exist367
Cpwd_Admin Flist368
Cpwd_Admin Getpid369
Cpwd_Admin Kill370
Cpwd_Admin List371
Cpwd_Admin Exist373
Cpwd_Admin Start374
Cpwd_Admin Start_Monitor376
Cpwd_Admin Stop377
Cpwd_Admin Stop_Monitor379
Fw -I383
Fw Amw384
Fw Ctl387
Fw Defaultgen436
Fw Fetch437
Fw Fetchlogs439
Fw Getifs441
Fw Hastat442
Fw Isp_Link444
Fw Kill445
Fw Lichosts446
Fw Log447
Fw Logswitch455
Fw Lslogs459
Fw Mergefiles462
Fw Monitor464
Fw Repairlog476
Fw Sam477
Fw Sam_Policy' and 'Fw6 Sam_Policy484
Fw Showuptables503
Fw Stat507
Fw Tab509
Fw Unloadlocal514
Fw Up_Execute517
Fw Ver520
Fwboot Bootconf521
Fwboot Bootconf523
Fwboot Corexl526
Fwboot Cpuid531
Fwboot Default533
Fwboot Fwboot_Ipv6534
Fwboot Fwdefault535
Fwboot Ha_Conf536
Fwboot Ht537
Fwboot Multik_Reg539
Fwboot Post_Drv540
Sam_Alert541
Usrchk544
Working with Kernel Parameters on Security Gateway547
Introduction to Kernel Parameters548
Firewall Kernel Parameters549
Securexl Kernel Parameters554
Kernel Debug on Security Gateway557
Kernel Debug Syntax557
Kernel Debug Filters563
Kernel Debug Procedure567
Kernel Debug Procedure with Connection Life Cycle569
Kernel Debug Modules and Debug Flags574
Module 'UPIS' (Unified Policy Infrastructure)575
Module 'UP575
Module 'Accel_Apps' (Accelerated Applications)576
Module 'Accel_Pm_Mgr' (Accelerated Pattern Match Manager)577
Module 'APPI' (Application Control Inspection)578
Module 'BOA' (Boolean Analyzer for Web Intelligence)579
Module 'CI' (Content Inspection)580
Module 'Cluster' (Clusterxl)581
Module 'Cmi_Loader' (Context Management Interface/Infrastructure Loader)583
Module 'CPAS' (Check Point Active Streaming)584
Module 'Cpcode' (Data Loss Prevention - Cpcode)585
Module 'Dlpda' (Data Loss Prevention - Download Agent for Content Awareness)586
Module 'Dlpk' (Data Loss Prevention - Kernel Space)587
Module 'Dlpuk' (Data Loss Prevention - User Space)588
Module 'Fg' (Floodgate-1 - Qos)589
Module 'FILEAPP' (File Application)590
Module 'Fw' (Firewall)591
Module 'Gtp' (GPRS Tunneling Protocol)595
Module 'H323' (Voip H.323)596
Module 'ICAP_CLIENT' (Internet Content Adaptation Protocol Client)597
Module 'IDAPI' (Identity Awareness API)598
Clob Classification Object (CLOB) Observer (Data Classification)598
Module 'Kiss' (Kernel Infrastructure)599
Module 'Kissflow' (Kernel Infrastructure Flow)601
Module 'MALWARE' (Threat Prevention)602
Module 'Multik' (Multi-Kernel Inspection - Corexl)603
Module 'MUX' (Multiplexer for Applications Traffic)604
Module 'NRB' (Next Rule Base)605
Module 'PSL' (Passive Streaming Library)606
Module 'RAD_KERNEL' (Resource Advisor - Kernel Space)607
Module 'RTM' (Real Time Monitoring)608
Module 'Seqvalid' (TCP Sequence Validator and Translator)610
Module 'SFT' (Stream File Type)611
Module 'SGEN' (Struct Generator)612
Module 'Synatk' (Accelerated SYN Defender)613
Module 'UC' (Usercheck)614
Module 'UP' (Unified Policy)615
Vpn VPN Classifier615
Module 'Upconv' (Unified Policy Conversion)617
Module 'UPIS' (Unified Policy Infrastructure)618
Flag Description619
Module 'VPN' (Site-To-Site VPN and Remote Access VPN)620
Also See the620
Module 'WS' (Web Intelligence)622
Address Information about Connection's IP Address622
Coverage Coverage Times (Entering, Blocking, and Time Spent)622
Info General Information622
Memory Memory Allocation Operations622
Subject Prints the Debug Subject of each Debug Message623
Timestamp Prints the Timestamp for each Debug Message623
Debug Flag 'Coverage')623
Vs Prints the VSID of the Debugged Virtual System623
Error General Errors624
Verbose Prints Additional Information (Used with Other Debug Flags)626

Check Point R80.20 - Cpwd_Admin Exist

Table of Contents

Related product manuals