topic how to check the latest update from url filtering in Firewall and Security Management

how to check the latest update from url filtering

tavi0906 — Tue, 27 Jun 2023 07:32:57 GMT

Re: how to check the latest update from url filtering

Lesley — Tue, 27 Jun 2023 08:01:24 GMT

Does this help you in any way?

With this commands you can check the version on the gateway.

cpstat appi -f update_status

cat $FWDIR/appi/update/appi_status.C

cat $FWDIR/appi/update/Version

To perform manual update:

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Multi-DomainSecurityManagement_AdminGuide/Topics-MDSG/Updating-Application-URL-Filtering-Database.htm

Re: how to check the latest update from url filtering

G_W_Albrecht — Tue, 27 Jun 2023 08:44:34 GMT

Re: how to check the latest update from url filtering

tavi0906 — Tue, 27 Jun 2023 08:56:54 GMT

Hi team,

thanks for your responses i have went through those. is there anyway that we can see the time/date at which the appi and urlf get updated .

Re: how to check the latest update from url filtering

G_W_Albrecht — Tue, 27 Jun 2023 09:17:26 GMT

This is shown here: Update was created 22.6. 11:55, so SMS and GWs were updated at next scheduled update time (23.6. 1 and 3 a.m.) !

Re: how to check the latest update from url filtering

the_rock — Tue, 27 Jun 2023 13:07:27 GMT

Everything is visible from commands you were given by @Lesley and @G_W_Albrecht . On top of what you asked, you can also check IPS status (if needed) with command below.

Andy

[Expert@quantum-firewall:0]# cat /opt/CPsuite-R81.20/fw1/ips/update/ips_status.C
(
: (IPS
:app_db_version (635234258)
:app_update_description ("Gateway was updated with database version: 635234258.")
:app_update_status (new)
:app_next_update_description ("The next update will be run as scheduled.")
:app_subscription_expiration_date ("Wed Jul 26 19:12:15 2023")
:app_subscription_status (about-to-expire)
:app_subscription_enforcement_status (valid)
:app_subscription_description ("Contract will expire in 29 days.")
)
)
[Expert@quantum-firewall:0]#

Re: how to check the latest update from url filtering

the_rock — Tue, 27 Jun 2023 13:09:35 GMT

I also found out about this command few months ago, never knew about it (might be useful) to you.

Andy

[Expert@quantum-firewall:0]# fw stat -b AMW
Anti Bot: Disabled (network signatures=0 behavioral=0)
Anti Virus: Disabled (network signatures=0 behavioral=0)
IPS: Enabled (use "ips stat")
Threat Emulation: Disabled
Threat Extraction: Disabled
Mail policy: Off
Zero Phishing: Off
files: http=0 ftp=0 smb=0 smtp=0 pop3=0
more: fileapp_ctx_enabled=0 ifi=0 http_dynamic_enabled=0 icap_server_enabled=0 min_severity=2 min_confidence=0
Policy: LAB-POLICY Mon Jun 26 13:07:19 2023 (traditional=1)
[Expert@quantum-firewall:0]#

Re: how to check the latest update from url filtering

tavi0906 — Wed, 28 Jun 2023 09:36:09 GMT

i have run the commands got the output about expire.

# cpstat urlf -f subscription_status

Subscription status: about-to-expire

# cat $FWDIR/appi/update/appi_status.C
(
:status (0)
:status_short_desc ()
:status_long_desc ()
:app_update_status (up-to-date)
:app_update_description ("Gateway is up to date. Database version: 16062301.")
:app_next_update_description ("The next update will be run as scheduled.")
:app_db_version (16062301)
:urlf_status_code (0)
:urlf_status_short_description ()
:urlf_status_long_description ()
:appi_rad_status_code (0)
:appi_rad_status_description ("Application Control Engine is up and running")
:urlf_rad_status_code (0)
:urlf_rad_status_description ("URL Filtering engine is up and running")
:app_subscription_expiration_date ("Sun Dec 31 00:00:00 2023")
:app_subscription_status (valid)
:app_subscription_description ("Contract is up to date.")
:urlf_subscription_expiration_date ("Sun Dec 31 00:00:00 2023")
:urlf_subscription_status (valid)
:urlf_subscription_description ("Contract is up to date.")
Subscription expiration date: Fri Jun 9 18:12:15 2023
Subscription description: Trial license will expire in 7 days.

Re: how to check the latest update from url filtering

tavi0906 — Thu, 06 Jul 2023 07:36:20 GMT

the appi and urlf is not updating auotmatic once in a day .is there anything to check and change ?

Re: how to check the latest update from url filtering

PhoneBoy — Thu, 06 Jul 2023 15:41:16 GMT

Start here: https://support.checkpoint.com/results/sk/sk73220
For further assistance, please consult with the TAC: https://help.checkpoint.com