Options

-num=<n>

Limit display to <n> certificates. (Default: 5)

-off

Turn snoop off.

-on

Turn snoop on.

-restart

[WARNING] Restart the ACME client, resetting all object states.

-show

Show info on ACME object.

-snoop

Show requests and server responses on the console window.

-verbose

Show snoop detailed information.

<ACME Certificate Management>

Name of certificate.

Options

-active

Show the currently active alarms.

-history

Show the 20 latest alarms.

Options

-application=<String>

Exact application name.

-delete_lists={ALL | <Integer>}

Free saved Strings.

-family=<String>

Application family.

-filter

Shows applications matching certain criteria.

-name=<String>

Application name (wildcards allowed).

-risk={VERY_LOW | LOW | MEDIUM | HIGH | VERY_HIGH}

Application risk level.

-save_list

Saved filter result.

-show_lists

List saved strings.

-tag=<String>

Application tag.

<Name>

Application name.

Options

-flush

Flush ARP cache of all specified interfaces. (Admin only)

-hashinfo

Show information on hash table health.

-hw=<pattern>

Show only hardware addresses matching pattern.

-hwsender=<Ethernet Address>

Sender ethernet address.

-ip=<pattern>

Show only IP addresses matching pattern.

-notify=<ip>

Send gratuitous ARP for <ip>.

-num=<n>

Show only the first <n> entries per interface. (Default: 20)

-show

Show ARP entries for given interface(s).

<Interface>

Interface name.

Options

-verbose

Verbose.

{ALL | NONE | <interface>}

Interface name.

Options

-num=<n>

Limit list to <n> entries. (Default: 20)

Options

-reconnect

Closes the connection with the Agent and attempst to reconnect. (Admin only)

-version

Show protocol version.

{ALL | <AuthAgent>}

Authentication Agent name.

Options

-verbose

Verbose.

{ALL | NONE | <AuthAgent>}

Authentication Agent name.

Options

-alerttype={IDS | HOST_THRESHOLD | NETWORK_THRESHOLD | CLI | REST | DOS_GENERAL | DOS_GEOIP | BOTNET | SCANNER | SPAM | PHISHING | ALL}

Alert types to show (Default: ALL).

-all

Show all the information.

-black

Show blacklist hosts only.

-block

Block specified netobject. (Admin only)

-creationtime

Show creation time.

-dest=<ip address>

Destination address to block/unblock (ExceptExtablished flag is set on).

-dynamic

Show dynamic hosts only.

-force

Unblock all services for the host that matches to options.

-info

Show detailed information.

-listtime

Show time in list (for dynamic whitelist hosts).

-num={ALL | <Integer>}

Maximum number of entries to show (Default: 20).

-port=<port number>

Number of the port to block/unblock.

-prot={TCP | UDP | ICMP | OTHER | TCPUDP | ALL}

Protocol to block/unblock.

-purge

Unblock all object of specific type. (Admin only)

-serv=<service>

Service to block/unblock.

-show

Show information about the blacklisted hosts.

-time=<seconds>

The time that the host will remain blocked.

-unblock

Unblock specified netobject. (Admin only)

-white

Show whitelist hosts only.

<host>

IP address range.

{IDS | HOST_THRESHOLD | NETWORK_THRESHOLD | CLI | REST | DOS_GENERAL | DOS_GEOIP | BOTNET | SCANNER | SPAM | PHISHING}

Alert types to purge.

Options

-flush

Flush CAM table. If interface is specified, only entries using this interface are flushed. (Admin only)

-num=<n>

Limit list to <n> entries per CAM table. (Default: 20)

<Interface>

Interface.

Options

-flush

Flush certificate cache.

-verbose

Show verbose information.

Options

-all

Mark all connections.

-close

Close all connections that match the filter expression. (Admin only)

-dataless=<bytes>

Filter on amount of data transferred below specified limit. Acceptable suffixes are 'k', 'M' and 'G'.

-datamore=<bytes>

Filter on amount of data transferred above specified limit. Acceptable suffixes are 'k', 'M' and 'G'.

-destiface=<interface>

Filter on destination interface.

-destip=<ip address>

Filter on destination IP address.

-destport=<port>

Filter on TCP/UDP destination port.

-extended

Show connections with extended information.

-ipver={IPV6 | IPV4}

Filter on IP version.

-num=<n>

Limit list to <n> connections. (Default: 20)

-protocol=<name/num>

Filter in IP protocol.

-show

Show connections.

-srciface=<interface>

Filter on source interface.

-srcip=<ip address>

Filter on source IP address.

-srcport=<port>

Filter on TCP/UDP source port.

-verbose

Verbose (more information).

Options

-remove

Remove all stored crashdumps.

Options

-all

Show information about all devices.

-hashinfo

Show information about the hardware fastpath hash.

Options

-clean

Remove all diagnose entries. (Admin only)

-date=<date>

YYYY-MM-DD. Only show entries from this date and forward.

-flush

Flush all diagnose entries to disk. (Admin only)

-onlyhigh

Only show entries with severity high. (Admin only)

Options

-lease={RENEW | RELEASE}

Modify interface lease. (Admin only)

-list

List all DHCP enabled interfaces.

-show

Show information about DHCP enabled interface.

<interface>

DHCP Interface.

Options

-interface=<Interface>

Interface.

-num={ALL | <Integer>}

Maximum number of entries to show (Default: 20).

-release

Terminate relayed session <[interface:]ip>. (Admin only)

-routes

Show the currently relayed DHCP sessions.

-rules

Show the DHCP/BOOTP relayer ruleset.

-show

Show ruleset.

<display filter>

Display filter, filters relays based on interface/ip.

<ip address>

IP address.

Options

-fromentry=<Integer>

Show entry list from offset <n>.

-leases

Show DHCP server leases.

-mappings

Show DHCP server IP mappings.

-num=<Integer>

Limit list to <n> entries.

-release={BLACKLIST}

Release specific type of IPs. (Admin only)

-releaseip

Release an active IP. (Admin only)

-rules

Show DHCP server rules.

-show

Show ruleset.

-utilization

Show IP pool utilization.

<Display filter>

Display filter based on Interface/MAC/IP (eg. If1 192.168.*).

<Interface>

Interface.

<IP address>

IP address.

Options

-lease={RENEW | RELEASE}

Modify interface lease. (Admin only)

-list

List all DHCPv6 enabled interfaces.

-show

Show information about DHCPv6 enabled interface.

<interface>

DHCPv6 Interface.

Options

-fromentry=<Integer>

Shows dhcp server lease list from offset <n>.

-leases

Show DHCPv6 server leases.

-num=<Integer>

Limit list to <n> leases.

-releaseip

Release an active IP. (Admin only)

-rules

Show DHCPv6 server rules.

-show

Show ruleset.

<display filter>

Display filters for leases based on interface/mac/ip (eg. if1 2001:DB8::*).

<interface>

Interface.

<IPv6 address>

IPv6 address.

Options

-cache

Show contents of the DNS cache.

-flush

Flush entire contents of the DNS cache.

-list

List pending DNS queries.

-num=<n>

Limit list to <n> addresses. (Default: 20)

-query

Resolve domain name.

-refresh

Set FQDN cache object to start DNS query.

-remove

Remove all pending DNS queries.

-type={A | AAAA}

Query type.

-verbose

Verbose output.

<domain name>

Resolve domain name.

<FQDNAddress>

FQDN Address object name.

Options

-clean

Clear DNSBL statistics for ALG.

-show

Show DNSBL statistics for ALG.

<SMTP ALG>

Name of SMTP ALG.

Options

-list

List all DNS Control sessions.

-num[=<Integer>]

Sessions to list. (Default: 40)

-stats

Show DNS Control statistics.

-verbose

Verbose output.

o

Route describe the optimal path to the network

u

Route is unexported

Options

-exports

Show current exports.

-rules

Show dynamic routing, filter ruleset.

Options

-hw=<Ethernet Address>

MAC address to be searched on.

Options

-resume

Resume load distribution to primary server (maintenance off).

-status

Display status for specific fallback policy.

-suspend

Suspend load distribution to primary server (maintenance on).

<ip address>

IP address.

<String>

Fallback policy.

Options

-active

Show active downloads.

-inactive

Show inactive downloads.

NEW

Newest reassembly

ALL

All reassemblies

0..1023

Assembly 'N'

Options

-done

List successfully reassembled (kept to see if more frags arrive).

-free

List free instead of active.

-num=<n>

List <n> entries. (Default: 20)

{NEW | ALL | <reassembly id>}

Show in-depth info about reassembly <n>. (Default: all)

Options

-activate

Go active. (Admin only)

-deactivate

Go inactive. (Admin only)

Options

-num=<n>

Limit list to <n> entries. (Default: 20)

-verbose

Verbose output.

Options

-count

Only display cache count.

-flush

Removes all entries.

-num=<n>

Limit list to <n> entries. (Default: 20)

-override

List hosts that have overridden the wcf filter.

-server[={STATUS | CONNECT | DISCONNECT}]

Web Content Filtering Server options. (Default: status)

-show

Show Web Content Filtering cache data.

-url=<String>

Limits the output from the show command to only match the specified characters.

-verbose

Verbose.

-wcfcache

Show statistics of WCF functionality.

Options

-repost=<Integer>

Re-post URL now. (Admin only)

Options

-all

Show ALL sensors, WARNING: use at own risk, may take long time for highspeed ifaces to cope.

-verbose

Show sensor number, type and limits.

Options

-all

mark all hosts.

-host=<ip addr>

Filter on source IP address.

-show

Lists hosts for which new connections are piped by IDP.

-unpipe

Remove piping for the specified host. (Admin only)

Options

-allindepth

Show in-depth information about all interfaces.

-extend

Display extended interface information where available.

-filter=<expr>

Filter list of interfaces.

-maclist

Show MAC addresses for all interfaces.

-num=<n>

Limit list to <n> lines. (Default: 20)

-pbr=<table name>

Only list members of given PBR table(s).

-restart

Stop and restart the interface. (Admin only)

-snmpnewindexes

Renumber persistent SNMP interface indexes for all interfaces. A reconfigure must follow this command in order to generate the new indexes.

-type={ETHERNET | IFACEGROUP | ZONE | ALL}

Filter interface type. (Default: ethernet)

<Interface>

Name of interface.

Options

-join

Simulate an incoming IGMP join message.

-leave

Simulate an incoming IGMP leave message.

-query

Simulate an incoming IGMP query message.

-state

Show the current IGMP state.

<host address>

Host IP address.

<Interface>

Interface.

<MC address>

Multicast Address.

<router address>

Router IP address.

Options

-brief

Show only header information.

-cfgmode

Show statistics for config mode pool.

-clear

Reset all statistics.

-connect

Setup IKE and IPsec SAs for a specified tunnel.

-delete

Delete IKE SAs. (Admin only)

-force

Don't send notifications. Delete without delay.

-ha

Show HA synchronizing statistics for IKE/IPsec SAs.

-match

Turn on snooping of tunnel matching.

-mem

Show memory statistics.

-num={ALL | <Integer>}

Maximum number of entries to show (Default: 40/8).

-off

Turn off IKE snoop.

-show

Show information on current IKE SAs.

-snoop

Enable/disable snooping of IKE messages. (Admin only)

-srcif=<Interface>

Interface used to reach the remote endpoint.

-stat

Show verbose information.

-tunnel=<IPsecTunnelBase>

IPsec interface.

-tunnels

Show information on configured tunnels.

-verbose

Show verbose information.

<ip address>

IP address of remote SG/peer.

<IPsecTunnelBase>

IPsec interface.

Options

-all

Free or renew all IP addresses.

-num=<n>

Limit list to <n> entries. (Default: 100)

-release

Forcibly free IP assigned to subsystem. (Admin only)

-renew

Try to renew IP leases through DHCP Server. (Admin only)

-show

Show IP pool information.

-verbose

Verbose output.

<ip address>

IP address to free or renew.

Options

-cache

IP Reputation cache.

-category[={ALL | SPAM_SOURCES | WINDOWS_EXPLOITS | WEB_ATTACKS | BOTNETS | SCANNERS | DOS | REPUTATION | PHISHING | PROXY | NETWORK | CLOUD_PROVIDERS | MOBILE_THREATS | <String>}]

IP Reputation category. (Default: all)

-flush

Remove IP Reputation cache entries.

-lookup[={ALLMETHODS | LOCAL | CLOUD | CACHE}]

Query lookup method. (Default: allmethods)

-num=<n>

Limit list to <n> entries. (Default: 40)

-query

Perform an IP Reputation query.

-show

Show IP Reputation update information.

-statistics[={TOTAL | 24H | 2M | 30D}]

IP Reputation statistics. (Default: 24h)

-subsystems

Show subsystem information.

-update

IP Reputation updates.

-updates

Update the IP Reputation database.

-verbose

Verbose output.

<ip address>

IP address.

Options

-defines

Show IPsec system defines.

-force

Bypass confirmation question.

-globalstats

Show global IPsec statistics.

-hash

Calculate hash of SA content.

-num={ALL | <Integer>}

Maximum number of entries to show (Default: 40/8).

-show

Show SA information.

-srcif=<Interface>

Interface used to reach the remote endpoint.

-stat

Show IPsec statistics.

-usage

Show detailed SA statistics information.

-verbose

Show verbose information.

<IPsecTunnelBase>

IPsec interface.

Options

-clear

Reset all statistics.

Options

-child

Include child sessions.

-l2tpclient=<PPTP/L2TP Client>

Only show sessions belonging to this L2TPClient.

-l2tpserver=<PPTP/L2TP Server>

Only show sessions belonging to this L2TPServer.

-l2tpv3client=<L2TPv3 Client>

Only show sessions belonging to this L2TPv3Client.

-l2tpv3server=<L2TPv3 Server>

Only show sessions belonging to this L2TPv3Server.

-num=<Integer>

Number of entries to list.

-state={ALL | ACTIVE | LISTENING}

Show sessions with specified state. (Default: active)

Options

-remove=<String>

Specify language file to delete.

Options

-list

List all LDAP databases.

-reset

Reset status for LDAP database. (Admin only)

-show

Show status and statistics.

<LDAP Server>

LDAP database.

Options

-activate

Manages license activation. (Admin only)

-checkdate

Request a check for a newer license from MyClavister. (Admin only)

-disconnect

Disconnects this device from MyClavister. (Admin only)

-downloadlicense

Requests a download of the latest license from MyClavister. (Admin only)

-myclavister

Manages the connection to MyClavister. (Admin only)

-password=<String>

Sets password to be used. (Admin only)

-remove

Remove license file from the firewall. (Admin only)

-request

Send request to Clavister server to activate license. (Admin only)

-secaas_add

Create new SECaaS configuration file. (Admin only)

-secaas_remove

Removes SECaaS configuration and license. System will restart in Demo mode. (Admin only)

-show

Show current status and credentials.

-update

Initiate a license update. (Admin only)

-username=<String>

Sets username to be used. (Admin only)

<String>

SECaaS identification number. (Admin only)

<String>

SECaaS license number. (Admin only)

Options

-abort

Abort running test.

-clear

Clear test results.

-clients[=<1...15>]

Max number of parallel clients to use. (Default: 1)

-host=<IPAddress>

Hostname or IP address for NDT7 test server.

-limit[=<MB>]

Max number of MB to transfer. (Default: 1000)

-pbr=<table>

Route using PBR Table.

-port=<1...65535>

Custom port for NDT7 test server.

-show

Show test status or results.

-ssl={TRUE | FALSE}

Specify if test should run over SSL.

-start

Starts test using Measurement Lab NDT7.

-start_http

Start HTTP(S) test using specified server.

-timeout[=<seconds>]

Max number of seconds to run test. (Default: 15)

-verbose

Show verbose information.

<String>

URL of test server.

{GET | PUT | POST}

HTTP method to use.

Options

-type={INCENTER | INCONTROL | REST | SNMP | SSH | WEBUI}

Type of management to display.

<String>

Object to show info for.

Options

-num=<Integer>

Maximum number of items to list (Default: 20).

<IPv4 Address>

Translated IP.

<pool name>

NAT Pool name.

Options

-del=<ip>

Delete ND cache entry <ip>.

-flush

Flush Neighbor Discovery cache of all specified interfaces. (Admin only)

-hashinfo

Show information on hash table health.

-hw=<pattern>

Show only hardware addresses matching pattern.

-ip=<pattern>

Show only IP addresses matching pattern.

-num=<n>

Show only the first <n> entries per interface. (Default: 20)

-query=<ip>

Send Neighbor Solicitation for <ip>.

-routerdiscovery

Show Router Discovery enabled interfaces.

-show

Show Neighbor Discovery entries for given interface(s).

<Interface>

Interface name.

Options

-verbose

Verbose.

{ALL | NONE | <interface>}

Interface name.

Options

-devinfo

Show Device Intelligence information.

-filter={INACTIVE | ACTIVE}

Shows the filtered contents of the neighbor cache, based on state.

-ipv6

Shows the ipv6 addresses for entries in the neighbor cache.

-names

Shows the host name and configured name for entries in the neighbor cache.

-show

Shows the default contents of the neighbor cache.

-users

Shows any authenticated users against their neighbor cache entry.

Options

-num=<num>

Number of entries to show. (Default: 20)

<String>

Name or pattern.

Options

-discovery

Do OIDC discovery download.

-manual

Show manual OIDC objects.

-memory

Show OIDC memory.

-refresh

Refresh OIDC objects by downloading OIDc discovery data for all configured OIDC Providers.

-url=<String>

OIDC discovery URL.

-verbose

Verbose output.

Options

-num=<n>

Limit display to <n> entries. (Default: 20)

-verbose

Verbose output.

Options

-area

Show area information.

-cfgneighbor

Show neighbor information by configured neighbor.

-database

Show the LSA database.

-execute={STOP | START | RESTART}

Start/stop/restart OSPF process. (Admin only)

-iface

Show interface information.

-ifacedown

Take specified interface offline. (Admin only)

-ifaceup

Take specified interface online. (Admin only)

-ip=<ip>

IP address.

-listall

Show list.

-lsa

Show details for a specified LSA <lsaID>.

-memory

Show OSPF memory usage.

-neighbor

Show neighbor information.

-num=<n>

Limit display to <n> objects. (Default: 20)

-process=<OSPF Router Process>

Required if there are >1 OSPF router processes.

-route

Show the internal OSPF process routingtable.

-snoop={ON | OFF}

Show troubleshooting messages on the console. (Admin only)

-status

Show OSPF status.

-verbose

Increase amount of information to display.

<interface>

OSPF enabled interface.

<interface>

OSPF enabled interface.

<lsaID>

LSA ID.

<OSPF Area>

OSPF Area.

<OSPF Neighbor>

Neighbor.

{HA | ALT}

Show HA routingtable.

Options

-cleanup

Remove all captured packets, release capture mode and delete all written capture files from disk.

-count=<value>

Number of packets to capture.

-destport=<String>

Destination TCP/UDP port filter.

-eth=<Ethernet Address>

Ethernet address filter.

-ethdest=<Ethernet Address>

Ethernet destination address filter.

-ethsrc=<Ethernet Address>

Ethernet source address filter.

-filename=<String>

Filename for capture file.

-icmp

ICMP filter.

-ip=<IPv4 Address>

IP address filter.

-ipdest=<IPv4 Address>

Destination IP address filter.

-ipsrc=<IPv4 Address>

Source IP address filter.

-ipversion=<1...15>

IP version filter.

-num={ALL | <Integer>}

Maximum number of entries to show (Default: 20).

-out

Realtime packet brief dumped to console.

-out-nocap

Unbuffered (not stored in memory) realtime packet brief dumped to console.

-port=<String>

TCP/UDP port filter.

-promisc

Set iface in promiscuous mode.

-proto=<0...255>

IP protocol filter.

-show

Show a captured packets brief.

-size=<value>

Size (kb) of buffer to store captured packets in memory (default 512kb).

-snaplen=<value>

Maximum length of each packet to capture.

-srcport=<String>

Source TCP/UDP port filter.

-start

Start capture.

-status

Show capture status.

-stop

Stop capture.

-tcp

TCP filter.

-udp

UDP filter.

-wipe

Remove all captured packets from memory.

-write

Write the captured packets to disk.

<interface(s)>

Name of interface(s).

Options

-all

Show all detected devices.

-cfgupdate

Updates the config with detected devices. (Admin only)

-ethernet

Show all detected ethernet devices.

-force_driver

Force a certain device to a specific driver. (Admin only)

<Integer>

Index of device to update.

{UIO}

Interface driver to use.

Options

-expr=<String>

Pipe wildcard(*) expression.

-show

Show pipe details.

-users

List users of a given pipe.

<Pipe>

Show pipe details.

Options

-child

Include child sessions.

-num=<Integer>

Number of entries to list.

-pptpclient=<PPTP/L2TP Client>

Only show sessions belonging to this PPTP client (L2TPClient with TunnelProtocol == PPTP).

-pptpserver=<PPTP/L2TP Server>

Only show sessions belonging to this PPTP server (L2TPServer with TunnelProtocol == PPTP).

-state={ALL | ACTIVE | LISTENING | CHILDONLY}

Show sessions with specified state. (Default: active)

Options

-num=<Integer>

Number of entries to list.

-services

List all services attached to PPTP ALG.

-sessions

List all session using a PPTP tunnel.

-verbose

Verbose output.

<PPTP ALG>

PPTP ALG.

Options

-ike

Rekey IKE SAs.

-ipsec

Rekey IPsec SAs.

<ip address>

IP address of remote peer.

Options

-monitored

Only show monitored objects.

-num={ALL | <Integer>}

Maximum number of entries to show (Default: 20).

-terse

Only show object name.

<filter>

Object filter.

Options

-ruleset={* | MAIN | <IP Rule Set>}

Show a specified IP ruleset.

-schedule

Filter out rules that are not currently allowed by selected schedules.

-type={IP | ROUTING | PIPE | IDP | THRESHOLD | IGMP}

Type of rules to display. (Default: IP)

-usageless=<usageless>

Filter on usage below(<=) specified limit.

-usagemore=<usagemore>

Filter on usage above(>=) specified limit.

-verbose

Verbose: show all parameters of the rules.

<rules>

Range of rules to display. (Default: all rules)

Options

-abort

Abort a running self test.

-burnin

Run burn-in tests for a selected set of sub tests.

-cryptoaccel

Verify the correct functioning of available crypto accelerator cards.

-hours[=<Integer>]

Test duration in hours. (Default: 48)

-interfaces=<Interface>

Ethernet interface(s).

-latency

Measure min/avg/max latency using low volume traffic test.

-mac

Check if there are MAC address collisions on the interfaces.

-media

Check the sanity of the disk drive.

-memory

Check the sanity of the RAM.

-minutes[=<Integer>]

Test duration in minutes. (Default: 0)

-num=<Integer>

Number of times to execute the test. (Default: 1)

-ping

Run a ping test over the interfaces.

-size=<Integer>

Size of media space to utilize in the test. Set in MB. (Default: 1)

-ssl

Validation and Performance test for SSL.

-throughput

Run a throughput test over the interfaces. This will show the maximal achievable interface throughput.

-traffic

Run a traffic test over the interfaces. The traffic test uses mixed frame sizes and verifies the content of each received frame.

-verbose

Print extra information about the test.

Options

-policy

Show IP Policy generated service information.

<String>

Name or pattern.

D

Session is disabled

S

Session uses a timeout in its subsystem

-

Session does not use timeout

Options

-disconnect

Forcibly terminate session(s). (Admin only)

-info

Show in-depth information about session.

-list

List active sessions.

-message

Send message to session.

-num=<n>

List <n> number of session.

-status

Show Session Manager status.

<database>

Name of user database.

<IP Address>

IP address.

<message text>

Message to send.

<session name>

Name of session.

{LOCAL | SSH | NETCON | HTTP | HTTPS}

Session type.

Options

-normal

Initiate core shutdown.

-reboot

Initiate system reboot.

<seconds>

Seconds until shutdown. (Default: 5)

-

0x00000001 GENERAL

-

0x00000002 ERRORS

-

0x00000004 OPTIONS

-

0x00000008 PARSE

-

0x00000010 VALIDATE

-

0x00000020 SDP

-

0x00000040 ALLOW_CHANGES

-

0x00000080 SUPPORTED_CHANGES

-

0x00000100 2543COMPLIANCE

-

0x00000200 RECEPTION

-

0x00000400 SESSION

-

0x00000800 REQUEST

-

0x00001000 RESPONSE

-

0x00002000 TOPO_CHANGES

-

0x00004000 MEDIA

-

0x00008000 CONTACT

-

0x00010000 CONN

-

0x00020000 PING

-

0x00040000 TRANSACTION

-

0x00080000 CALLLEG

-

0x00100000 REGISTRY

Options

-calls

Show active calls table.

-connection

Show SIP connections.

-definition

Show running ALG configuration parameters.

-flags=<String>

SIP snooping for certain levels. Expected number in hexadecimal notation.

-num=<n>

Limit list to <n> connections. (Default: 20)

-registration[={SHOW | FLUSH}]

Show or flush registration table. (Default: show)

-session

Show active SIP sessions.

-snoop={ON | OFF | VERBOSE}

Enable or disable SIP snooping. NOTE: 'verbose' option outputs a lot of information on the console which may lead to system instability. Use with caution. (Admin only)

-statistics[={SHOW | FLUSH}]

Show or flush SIP counters. (Default: show)

<alg>

SIP-ALG name.

<alg>

SIP-ALG name.

<ipaddr>

IP Address to snoop.

Options

-resume

Resume load distribution to SLB server (maintenance off).

-status

Display status for specific SLB policy.

-suspend

Suspend load distribution to SLB server (maintenance on).

<ip address>

IP address.

<String>

SLB policy.

Options

-list

Show SMTP sessions.

-logreceiver=<Mail Alerting>

LogReceiver.

-message=<String>

Mail message.

-num[=<1...1000>]

Number of entries to list. (Default: 40)

-sendmail

Send test mail to SMTP LogReceiver.

-stat

Show SMTP statistics.

-verbose

Verbose output.

Options

-engineId

Display the system's SNMPv3 engine ID.

Options

-keygen

Generate SSH Server private keys. This operation may take a long time to finish, up to several minutes!

-restart

Stop and start the SSH Server.

-status

Show server status and list all connected clients.

-verbose

Verbose output.

<Local System SSH Host Key>

Key type to create.

<ssh server>

SSH Server.

Options

-num=<n>

Limit display to <n> entries. (Default: 20)

Options

-num=<n>

Limit number of shown entries. (Default: 80)

Options

-force

Force synchronization regardless of the MaxAdjust setting.

-set

Set system local time: <YYYY-MM-DD> <HH:MM:SS>. (Admin only)

-sync

Synchronize time with timeserver(s) (specified in settings).

-verbose

Show more information about time zone and DST.

<date>

Date YYYY-MM-DD.

<time>

Time HH:MM:SS.

Options

-verbose

Verbose output.

<Integer Range>

Range of rules to list.

Options

-removedb={ANTIVIRUS | IDP | IPREPUTATION}

Remove the database for the specified service.

-servers

Show autoupdate server information.

-status[={ANTIVIRUS | IDP | IPREPUTATION | ALL}]

Show update status and service information. (Admin only; Default: all)

-update[={ANTIVIRUS | IDP | IPREPUTATION | ALL}]

Force an update now for the specified service. (Admin only; Default: all)

Options

-all

All users.

-blocked

List all blocked users.

-list

List all authenticated users.

-num=<n>

Limit list of authenticated users. (Default: 20)

-privilege

List all known privileges (usernames and groups).

-remove

Forcibly log out an authenticated user. (Admin only)

-user

Show all information for user(s) with this IP address.

-verbose

List all blocked users history.

<Interface>

Interface.

<user ip>

IP address for user(s).

Options

-num=<n>

Limit display lines to <n> entries in page. (Default: 20)

-page[=<n>]

Set page <n> for lines to display. (Default: 1)

-verbose

Show more details, eg zone and PBR table, for the configured VLAN interfaces.

<Interface>

Display VLAN information about this interface.

Options

-blockenet=<ethernet address>

Block the specified ethernet address. (Admin only)

-blockip=<ip address>

Block the specified IP address/net. (Admin only)

-eraseenet=<ethernet address>

Unblock the specified ethernet address.

-eraseip=<ip address>

Unblock the specified IP address/net.

-save

Save the current zonedefense state on all switches.

-show

Show the current block database.

-status

Show the current status of the zonedefense state machine.