topic Re: Getting the basics in Ansible

Getting the basics

Hugo_vd_Kooij — Tue, 14 Sep 2021 15:12:49 GMT

My immediate goal is use Ansible to get some basic facts from a large number of Check Point hosts. These hosts can be a Smart Center or a gateway or ....

From each host I woul like to known the most basic information:

Check Point version (ex: R80.40 or R81.10)
Check Point hotfix (ex: JHF Take 120 or JHF Take 11)
hostname

The hostname is something we get easily.

The version is more work but I think we can figure that one out to get a reliable response.

Getting the Jumbo Hotfix details is even more work and so far the results are not very reliable. And I have not found a good way to tell if a custom hotfix is installed either.

Did anyone master this subject?

Re: Getting the basics

Art_Zalenekas — Tue, 14 Sep 2021 16:01:30 GMT

You could use the run-script API or check_point.mgmt.cp_mgmt_run_script Ansible collection module to run cpinfo -yFW1 to get that information from a GW or cpinfo -yMGMT to get the information from the management server.

Re: Getting the basics

Hugo_vd_Kooij — Thu, 23 Sep 2021 06:50:32 GMT

I need to test this in our mixed customer environment to see how usefull the information is that way. Wil see if I can do so this afternoon.

Re: Getting the basics

Hugo_vd_Kooij — Thu, 23 Sep 2021 13:23:29 GMT

Actually `cpinfo -yMGMT` is not valid.

Re: Getting the basics

Chris_Atkinson — Thu, 23 Sep 2021 15:33:10 GMT

"cpinfo -y all" is probably simpler?

Re: Getting the basics

Art_Zalenekas — Thu, 23 Sep 2021 17:03:42 GMT

That will be valid on the SMS/MDS and Standalone. What version are you running?
Looking at cpinfo -yall, you can see all the subcategories that you can use for the -y parameter.