Accessing CP Rulebase using CLI

[vadi_ag]

Hi All
Is there anyway by which I can verify the rules that I have added using Dashboard through CLI , If I have any problems in accessing Dashboard then atleast I can verify using CLI
Kindly help me cos I can add this point in my Firewall Documentation
I am using R55 on Nokia IP 530

Kindly help me

Regards
Vadiraj

[abusharif]

check $FWDIR/database/rules.C on your firewall module.

[vadi_ag]

Hi

Thnx for ur answer but
Do I need to run this command on management server or on enforcement module ? i tried on both this is not working for me can you pls explain in detail

Reagrds
Vadiraj

[northlandboy]

abusharif specifically said the firewall module.

What do you mean by "it is not working for me?" Did you get some sort of error? Does that file not exist? Did you type in "check $FWDIR/database/rules.C"?

What he meant was to look at the file with your favourite text editor

[vadi_ag]

Hi
"abusharif specifically said the firewall module.

What do you mean by "it is not working for me?" Did you get some sort of error? Does that file not exist? Did you type in "check $FWDIR/database/rules.C"? "


I have a querry here pls dont get irritated by my querries
can u tell me where can i find $FWDIR on firewall module ? As per my undersatnding $FWDIR can be found in smartcenter server in distributed architecture , even i tried "find" command on firewall module but no results

Kindly help me

[northlandboy]

$FWDIR is an environment variable. You can't find it with find.

echo $FWDIR
cd $FWDIR/datatabase/

[vadi_ag]

Hi
Thnx a lot for ur kind help i was able to open the file but understood nothing there

[northlandboy]

You can work out what's going on if you work through it, but if you're not really familiar with working with text configs anyway, you're wasting your time. Actually even if you can work out what's going on, you're still wasting your time. Maybe only in a very specific debugging situation you might look at it, but that's something pretty advanced. In all my years of working with it, I've only had reason to look in there once or twice.

[abusharif]

you could use web visualization tool as well. Since u cant access mgmt via dashboard you should run it localy on the management server. This requires ofc shell access to the server running management module.


http://www.checkpoint.com/downloads/...ization%20Tool

[vadi_ag]

Hi
thnx a lot u both helped me a lot sorry if i hav said something wrong