nerdexam
Check_Point

156-836 · Question #108

What does the command'g_all' do?

The correct answer is A. It's followed by other command and execute it on all active Appliances within Security Group. The g_all command will perform following instruction on all ACTIVE SGMs. For example, g_all "touch test.txt" will create the test.txt file on all SGMs.

Orchestration and Scaling

Question

What does the command'g_all' do?

Options

  • AIt's followed by other command and execute it on all active Appliances within Security Group
  • BIt's followed by other command and execute it on all Appliances connected to Orchestrator
  • CSwitches all Appliances to Global mode
  • DBring up all Appliances

How the community answered

(27 responses)
  • A
    89% (24)
  • B
    7% (2)
  • C
    4% (1)

Explanation

The g_all command will perform following instruction on all ACTIVE SGMs. For example, g_all "touch test.txt" will create the test.txt file on all SGMs.

Topics

#g_all command#CLI#Appliance execution#Security Group

Community Discussion

4
Samuel O.Samuel O.Mar 2, 2026

The correct answer is A. The g_all command is a prefix you use in the Orchestrator CLI to fan out whatever follows it to every active Appliance inside the specific Security Group you are working in, not every single appliance connected to the Orchestrator across all groups. I ran into this distinction on a real deployment where someone used g_all thinking it would hit every box in the environment and was surprised when it only touched the active ones in that group, which is actually the safe behavior you want in production. Options B, C, and D are wrong because B confuses the Security Group scope with global Orchestrator scope, while C and D describe state changes that this command simply does not perform.

15
Orla P.Orla P.Mar 4, 2026

g_all is correct because it scopes the following command to every active Appliance inside the Security Group, not every Appliance the Orchestrator knows about, so option B is the common trap here. The distinction matters in production because you may have inactive or quarantined Appliances connected to the Orchestrator that you deliberately want to exclude.

3
Yusuf A.Yusuf A.Mar 10, 2026

So my senior had me run g_all on the Maestro box last week and it only hit the appliances in our specific Security Group, not every single box connected to the Orchestrator, which made me think the scope is tighter than it looks. Does g_all still skip an appliance in the group if it is in a non-active state, or does it try to reach all members regardless of their current status?

-1
Orla P.Orla P.Mar 12, 2026

g_all sends to all members of that Security Group regardless of state, so you will see a timeout or connection error in the output for any non-active SGM rather than a clean skip.

0
Full 156-836 Practice