You can use 32 as netmask and would work like a host as well. You can check the traffic to a network with the following command. seq=ccbcc90f ack=00000000 Traffic to/from a Network

Also, you can see the 4 capture points (iIoO): pre-inboundĬP-Firewall& amp gt fw monitor -e 'accept host(192.168.1.86) ' -m iO In this example, you can see the ingress interface (eth3) and the egress interface (eth1). You can check the traffic that a host is receiving or sending with the following command:ĬP-Firewall& amp gt fw monitor -e 'accept host(192.168.1.86) ' To enable SecureXL: fwaccel on Traffic to/from a Host If you have SecureXL enabled, some commands may not show everything.ī. To check active status issue: cphaprob stateĢ.

If you have a cluster, this command will show traffic flowing through the active firewall.Ī. I will show you how to use fw monitor the way I use it for my troubleshooting process.ġ. If you want to check the traffic flowing through a Checkpoint firewall without using the SmartView Tracker, you can use “fw monitor” command. How to See a Network Flow Through the CLI in a Checkpoint Firewall

Checkpoint firewalls