Re: disconnecting GUI clients

fwm lock_admin -ua

Removes the lock from administrators that have been locked
out of the SCS 
because of excess failed logins.  -ua does all of them -u
<admin_name> does 
specific ones.

Roger Herr

WhyNot? Consulting Services
24165 IH 10 West Suite 217-183
San Antonio, Texas 78257
210-860-3990
Some men see things as they are and say why?
I dream things that never were and say "Why Not?"
                                                -Robert F.
Kennedy

Or the original

You see things; and you say "Why?" But I dream
things that never were; and I 
say "Why not?"
George Bernard Shaw
(1856-1950)
----- Original Message ----- 
From: "Matthew Odendaal" <matthewISA.CO.ZA>
To: <FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM>
Sent: Wednesday, August 29, 2007 1:37 PM
Subject: Re: [FW-1] disconnecting GUI clients


> There are 3 ways to disconnect GUI clients from the
command line:
>
> 1. "cprestart" - not the best option as it
also kills all connections if
> the mgmt server is also the enforcement point.
> 2. "fwm lock_admin -ua" - this will unlock
all administrative locks on
> the database, the "-v" option shows which are
connected.
> 3. "fw kill fwm" followed by
"cpstart". This will kill the fwm process
> which listens for management connections, then the
cpstart command will
> restart it and allow any new connections.
>
> Cheers
>
> Matthew Odendaal
> Information Security Architects (Pty) Ltd
>
> matthewisa.co.za
>
>
>
> This e-mail and/or attachments are subject to the ISA's
e-mail legal and
> confidentiality notice which appears on the ISA web
site at
> http://www.i
sa.co.za/e-mail-notice.html.
> Views expressed herein do not necessarily represent the
views of
> Information Security Architects (Pty) Ltd.
>
>
>
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of No Name
> Available
> Sent: 29 August 2007 04:49 PM
> To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
> Subject: [FW-1] disconnecting GUI clients
>
> Hi All
> How can I check from management server cli which gui
clients are
> connected and how to disconnect them.
>
> Kind regards
>
> This electronic message contains information from
bet365 Group Limited
> which may be privileged or confidential. The
information is intended to
> be for the use of the individual(s) or entity named
above. If you are
> not the intended recipient be aware that any
disclosure, copying,
> distribution or use of the contents of this information
is prohibited.
> If you have received this electronic message in error,
please notify us
> by telephone or email immediately.
>
> Activity and use of the bet365 Group Limited email
system is monitored
> to secure its effective operation and for other lawful
business
> purposes.  Communications using this system will also
be monitored and
> may be recorded to secure effective operation and for
other lawful
> business purposes.
>
> bet365 Group Limited
> Registered office: Hillside, Festival Way,
Stoke-on-Trent,
> Staffordshire, ST1 5SH
> Registered in England no. 3958393
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> ================================================= 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================