156-215.80 · Question #294
Which command can you use to verify the number of active concurrent connections?
The correct answer is B. fw ctl pst pstat. The fw ctl pstat command displays Check Point kernel statistics including the number of active concurrent connections.
Question
Which command can you use to verify the number of active concurrent connections?
Options
- Afw conn all
- Bfw ctl pst pstat
- Cshow all connections
- Dshow connections
How the community answered
(51 responses)- A2% (1)
- B92% (47)
- C2% (1)
- D4% (2)
Why each option
The fw ctl pstat command displays Check Point kernel statistics including the number of active concurrent connections.
fw conn all is not a valid Check Point CLI command and will not execute successfully on a gateway.
fw ctl pstat is a Check Point kernel-level command that outputs real-time performance statistics from the firewall kernel, including the current count of active concurrent connections. It reads directly from kernel memory structures, making it the authoritative source for connection table state. This command is the standard tool used by Check Point administrators and support for diagnosing connection capacity issues.
show all connections is not a recognized Check Point command syntax and does not exist in the standard CLI.
show connections is a valid command in some contexts but does not provide an aggregate count of concurrent active connections the way fw ctl pstat does.
Concept tested: Check Point CLI command for concurrent connection statistics
Source: https://support.checkpoint.com/results/sk/sk30042
Topics
Community Discussion
No community discussion yet for this question.