Ansible module collection for Check Point host facts and Deployment Agent

Duane_Toler — Sat, 06 Jun 2026 20:19:21 GMT

This is an Ansible module collection for additional tasks on Check Point hosts:

https://github.com/Webfargo/ansible-collection-check_point/

webfargo.check_point.da_command: Run arbitrary da_cli commands webfargo.check_point.da_package: Manage Check Point packages via the Deployment Agent webfargo.check_point.da_package_info: Query Check Point Deployment Agent package information webfargo.check_point.da_status: Get Check Point Deployment Agent status webfargo.check_point.gather_facts: Gather Check Point Gaia OS specific facts

Install from Ansible Galaxy:

ansible-galaxy collection install webfargo.check_point

Direct install from GitHub with ansible-galaxy:

ansible-galaxy collection install git+https://github.com/Webfargo/ansible-collection-check_point.git

The gather_facts module includes these Check Point host facts:

Check Point version (R81.20, R82, R82.10, etc.)
Installed hotfix versions (for all installed products)
Host type (gateway/management/standalone)
OS code name and build number
Deployment Agent build number
SIC certificate info
Hardware platform
VSX status
Cluster/HA status
Check Point SNMP daemon status
Firewall policy status (if gateway)

The Deployment Agent modules include:

Verify, Install, Uninstall packages
Blink and clean-install/upgrade packages
Import packages from local disk
Update package repository
Query package repository
Check Deployment Agent status
Run arbitrary Deployment Agent commands

Package install/uninstall operations will poll the Deployment Agent task continuously to monitor the progress. When the host reboots, the status is monitored to return a successful status rather than dropping the connection. The Ansible module wait_for_connection can be used to monitor the host's reboot operation.

For Blink package upgrades, the multi-stage reboot is monitored by the da_package module to check the stage 2 operation rather than dropping the SSH connection.

Packages can be copied with the Ansible module ansible.builtin.copy and imported to the package repository.

Although R82 has introduced package management with the management API, there may be times when direct package management may be necessary on the remote host. For those without R82 yet, this could help you get there!

Re: Ansible module collection for Check Point host facts and Deployment Agent

Duane_Toler — Thu, 11 Jun 2026 14:10:04 GMT

v0.7.0 has been release, fixing some bugs, install and upgrade state oddities encountered recently:

https://github.com/Webfargo/ansible-collection-check_point/tree/v0.7.0

Change Log included, too: https://github.com/Webfargo/ansible-collection-check_point/blob/v0.7.0/CHANGELOG.md

topic Re: Ansible module collection for Check Point host facts and Deployment Agent in Automation and APIs

Ansible module collection for Check Point host facts and Deployment Agent

Re: Ansible module collection for Check Point host facts and Deployment Agent