Check Point CLI Administration Cheat Sheet

Kim Johansson 2021-04-20 2 min read

Activate Check Point CLI shell from expert mode

Run clish from expert mode. This only works if you logged into expert mode directly via SSH. It doesn’t work if you first logged into clish and then switched to expert mode.

Works: expert -> clish Does not work: clish -> expert -> clish

In the latter case, just exit from expert mode to get back to the clish environment.

Schedule a recurring task via cron

Given that Check Point Gaia is running Linux, it’s running a normal cron scheduler like any other Linux distribution. However, it’s not configured via crontab -e like you’re used to. To properly schedule recurring tasks on Check Point Gaia, run the following command in clish:

add cron job NAME command /path/to/command recurrence daily time 01:30

This will schedule the command /path/to/command to be executed daily at 01:30. The NAME is just for management purposes, it shows up in the crontab file as a comment ##NAME above the actual line.

The name should only consist of alphanumeric characters, no spaces.

To list all active cron jobs, run show cron jobs. This will only show the name, so you need to run additional commands to view the recurrence and the command each entry runs.

To view the reccurence, run show cron job NAME recurrence.

To view the command, run show cron job NAME command.

In expert mode, you can simply run crontab -l as the admin user to list all the configured crontab entries.

Example: Start of every hour

add cron job NAME command /path/to/command recurrence daily time *:00

Example: At 00:00 on the first day of every month

add cron job NAME command /path/to/command recurrence monthly month * days 1 time 00:00

Example: At 00:00 on the first day of each quarter

add cron job NAME command /path/to/command recurrence monthly month */3 days 1 time 00:00
add cron job NAME command /path/to/command recurrence monthly month 1,4,7,10 days 1 time 00:00
add cron job NAME command /path/to/command recurrence monthly month JAN,APR,JUL,OCT days 1 time 00:00

All three are equivalent, it’s just different methods of writing “every quarter”.

Example: At 00:00 on monday of every week

add cron job NAME command /path/to/command recurrence weekly days 1 time 00:00

Example: At every boot

add cron job NAME command /path/to/command recurrence system-startup