topic Re: Fetching threat prevention with fw -d amw fetch in General Topics

Fetching threat prevention with fw -d amw fetch

Francisco_Melo — Fri, 30 Jun 2023 12:34:30 GMT

I created a code that is working from my MGMT to fetch the new IPS policy on each gateway I have this should update the version. When I run fw stat -b AMW it appears the gateway latest DATE update is correct but if I do an IPS stat it doesn't update the latest IPS Update VERSION. Has anyone got this issue as well? I tried even from the gateway to run the fw amw fetch command and it tells me "Fetching Threat Prevention policy succeeded" but still I run IPS stat and don't have the latest updated version

Re: Fetching threat prevention with fw -d amw fetch

G_W_Albrecht — Fri, 30 Jun 2023 07:49:28 GMT

What about the IPS versions listed here ? https://community.checkpoint.com/t5/Threat-Prevention/Checkpoint-IPS-Package-version/m-p/155671#M4092

Or on SMS:

mgmt_cli show ips-status | grep -w --color "installed-version:"

Re: Fetching threat prevention with fw -d amw fetch

Francisco_Melo — Fri, 30 Jun 2023 11:31:30 GMT

yes that gives me the latest version but what I'm trying to do is use the fw amw fetch to grab the latest version on the gateways.

Re: Fetching threat prevention with fw -d amw fetch

PhoneBoy — Fri, 30 Jun 2023 13:26:10 GMT

This command fetches the compiled policy from the management.
It does not update the IPS signatures to the latest version.
See: https://support.checkpoint.com/results/sk/sk179425
And: https://support.checkpoint.com/results/sk/sk112635