topic Re: Gaia build number list including HFAs - does it exist? in Firewall and Security Management

Gaia build number list including HFAs - does it exist?

Petr_Hantak — Tue, 18 Sep 2018 13:13:32 GMT

I have following problem. Quite a lot of Check Point devices across multiple core networks and remote branches as well. We are reading information from devices via HPNA.

I would like to sum up and compare device software versions in simple output where I could tell if it is already up to date for latest Jumbo HFA or if patching needs to be plan. (You can imagine that it is quite a task negotiate suitable patching window with all customers, so we have always some devices on older version).

I made simple table of few latest HFAs for R77.30 which looks following:

R77.30
HFA take	Build number	SVN build
317	R77.30 - Build 126	990180074
302	R77.30 - Build 115	990180073
292	R77.30 - Build 104	990180058
225	R77.30 - Build 060	990180695
216	R77.30 - Build 048	990180695
159	R77.30 - Build 137	990180695

I tried to find some versions summary on in SKs, but there are major releases only in List of R77.30 Gaia OS build numbers and kernel versions per released image or List of R80.10 Gaia OS build numbers and kernel versions per released image

Do you know if is it versioning summarized anywhere? HPNA reading Build number like in table by default.

Re: Gaia build number list including HFAs - does it exist?

Kaspars_Zibarts — Fri, 21 Jun 2019 09:14:58 GMT

You can always try this and avoid build numbers altogether. Just pure take # if that's what you're after

https://community.checkpoint.com/thread/7023-security-gateway-inventory

Re: Gaia build number list including HFAs - does it exist?

Petr_Hantak — Mon, 24 Sep 2018 07:53:29 GMT

Thank you for your tip. I tried your script already before. In case I won't find build numbers way, then it could be a solution. I just wanted to use channels which I have already like SNMP because it is always more hard to add command functionality under 3rd party tools. Every customization comes with greater headache.

Re: Gaia build number list including HFAs - does it exist?

Kaspars_Zibarts — Mon, 24 Sep 2018 08:21:30 GMT

Understand but that means you have to maintain the "matrix" of build numbers vs takes

But I agree - take number should be included in SNMP by now as it is the main reference these days anyways

Re: Gaia build number list including HFAs - does it exist?

Danny — Tue, 25 Sep 2018 12:24:50 GMT

HP Network Automation (HPNA) uses SNMP so you can always add additional checks via Advanced SNMP configuration as described here.

Re: Gaia build number list including HFAs - does it exist?

JozkoMrkvicka — Sat, 29 Sep 2018 13:29:25 GMT

In HPNA you can create custom diagnostics where you can do whatever you want.

For example, we are checking content of fwkern.conf based on HPNA diagnostic.

In your case, you can simple say that you want to perform following commands on selected gateways (and managements):

cpinfo -y all

installed_jumbo_take (from expert)

In newer Jumbo Takes, you have Take number mentioned in cpinfo -y all output.

HPNA can be used also to send email with output from diagnostic.

Re: Gaia build number list including HFAs - does it exist?

Petr_Hantak — Mon, 01 Oct 2018 12:41:16 GMT

Thank you Jozko Mrkvicka‌ and Danny Jung‌. Actually this seems to be true way for now. I already contacted our responsible HPNA specialst to help me with suitable setup.

Also reading content from fwkern.conf isn't a bad idea at all, because that is sad true that HPNA doesn't read this kind of configuration parts at all.

Re: Gaia build number list including HFAs - does it exist?

JozkoMrkvicka — Mon, 01 Oct 2018 15:45:18 GMT

HPNA is powerful tool despite the fact that it is not user friendly oriented.... You just need to spend days and play with it... or hire HPNA specialist for that

Re: Gaia build number list including HFAs - does it exist?

MikeH — Fri, 10 Mar 2023 21:23:19 GMT

Bumping.

Does a comprehensive build list exist?

Re: Gaia build number list including HFAs - does it exist?

PhoneBoy — Sat, 11 Mar 2023 04:02:58 GMT

As far as I know, we have not assembled this for more recent releases.