We've got Check Point Firewalls at work, and during updates I see lots of .tcl in the web UI.