How to read the Firewall status

[antonyso88]

I've HA in VRRP running in Nokia IP390 checkpoint R61. Smartcenter is solaris box. I want to know any command in smartcenter which can read the nokia box status?

[northlandboy]

You could try cpstat fw -h <hostname>

Not really all that common to run commands to check from the management station. Most people log on to the firewall to run commands.

[antonyso88]

Is there any command can show which one is Active/standby? Because my nokia is in HA. I want to identify which firewall box is active.

[northlandboy]

If you're using IPSO with VRRP, then you can't ask Check Point who's active/standby - you need to query IPSO.

Look on the VRRP monitor page, or run clish or iclid, and use the command show vrrp

[donshoutarp]

This may not always be a 100% acurate way to tell, but...

In SmartView Monitor the Average CPU of the Master should be higher.

[fhoekie]

> iclid
show vrrp


VRRP State
Flags: On,LocalReceive,MonitorFirewall
2 interface enabled
2 virtual routers configured
0 in Init state
2 in Backup state
0 in Master state