Technical data

Command Line Reference
Check Point VSX Administration Guide NGX R67 | 186
Argument
Description
-c
Cluster mode, get policy from one of the cluster members, from
the Check Point High Availability (CPHA) kernel list.
-i
Ignore SIC information (for example, SIC name) in the database
and use the information in conf/masters. This option is used
when a Security Policy is fetched for the first time by a DAIP
gateway from a Security Management Server with a changed
SIC name.
master1
Runs the command on the designated master.
The name of the Security Management Server from which to
fetch the Policy. You may specify a list of one or more Security
Management Servers, such as master1 master2 which will be
searched in the order listed.
If targets is not specified, or inaccessible, the policy is fetched
from localhost.
-vs <VSID>
Fetches a Security Policy to the specified Virtual System.