topic Re: live date of FW in Firewall and Security Management

live date of FW

Rob_Napholz — Wed, 26 Jun 2019 20:40:19 GMT

I would like to determine the date a firewall was installed on the network.

On the MGMT, I can call an API to determine the date the object was created.

but how can I determine the date on the gateway ? I thought about checking /etc/.wizard_accepted but this is the build date.

Can I determine when SIC was established ? what files are touched ?

Re: live date of FW

Nick_Doropoulos — Wed, 26 Jun 2019 21:28:20 GMT

Hi Rob,

I am not sure what you mean by "when the firewall was installed on the network" but you can find out when SIC was established by going into the cpd.elg file located in the $CPDIR/log directory.

You should be able to see SIC initialization along with dates as shown below:

I hope this helps.

Re: live date of FW

Rob_Napholz — Thu, 27 Jun 2019 12:25:34 GMT

in your example you can see the failure, I believe this to be the deamon starting. I have hundreds of the startup messages, but by parsing the file I was able to determine the date. Not sure how to automate the process.

Thanks

Re: live date of FW

G_W_Albrecht — Thu, 27 Jun 2019 13:18:54 GMT

In the GW /boot folder you can find links to the kernel:

vmlinuz

vmlinuz-x86_64

System.map

These are created when the GW is installed / upgraded...