The fw command is more or less a leftover command from previous versions. It is my understanding it actually makes calls to other commands to complete the task it is asked to do. cpstat is supposed to be the preferred way to do this according to the Check Point curriculum. I have found (at least in the NGX versions) that you can look at SmartView Monitor (used to be SmartView Status) you can select the Gateway and see the number of concurrent connections in the lower pane. This is assuming, of course, that you are able to launch the GUI and communication is happening properly between the Gateway and the SmartCenter/CMA. Christopher Hoff, SE - Ohio Valley FishNet Security web: www.fishnetsecurity.com
-----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of cisco4ng Sent: Tuesday, March 06, 2007 7:46 AM To: [email protected] Subject: [FW-1] lesser of two evils. Which is the preferred method? Hi All, In the past on CP 4.1, NG and NG AI, when finding out the number of active connections on the Nokia firewall, I performed the following command: fw tab -s -t connections The problem is that when the firewall is under extreme high cpu usage, sometimes it can cause the firewall to stop traffics, especially with NG Feature Pack 3 I also learned that starting with Checkpoint NG Feature Pack 3, there is another command that will also do just that. The command is: cpstat fw -f policy It will show me the same thing as the previous command. I found out that this command works better even when the firewall is under extreme high cpu usage but I've not tried it extensively to know what the downside might be. Any comments? Thanks. cisco4ng --------------------------------- Expecting? Get great news right away with email Auto-Check. Try the Yahoo! Mail Beta. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
