enable or disable a Provider-1 CMA

From cpwiki.net
Jump to: navigation, search
Check Point Profressional Services


to disable a cma…

1)	Connect to cma with write privledges, this creates a manage.lock file in $FWDIR/tmp/
2)	mdsenv <cma|cma_ip>
3)	chattr +i $FWDIR/tmp/manage.lock 
        this makes the file undeletable.  Attempts to “disconnect” and forcibly take write access via smartdashboard fail, rm on the file fails too.

to re-enable

1)	mdsenv <cma|cma_ip>
2)	chattr -i $FWDIR/tmp/manage.lock
         this makes the file deletable again
3)	rm $FWDIR/tmp/manage.lock