topic Re: Update ntpd - Ver. 4.2.6p5 in General Topics

Update ntpd - Ver. 4.2.6p5

FabioLima1 — Fri, 25 Aug 2023 19:52:12 GMT

Hey guys
I need help.
I need to update the Check Point gateways ntpd server version. Anyone who has done this activity?

Do you know if it is possible to update the ntpd?
[Expert@003-A:0]# ntpd --version
ntpd 4.2.6p5
ntpd 4.2.6p5@1.2349-? Fri Jun 25 13:31:00 UTC 2021 (1)

Re: Update ntpd - Ver. 4.2.6p5

the_rock — Tue, 22 Aug 2023 13:42:22 GMT

https://support.checkpoint.com/results/sk/sk92602

ntpq> version
ntpq 4.2.6p5@1.2349-? Fri Nov 11 13:12:00 UTC 2022 (1)
ntpq>

Re: Update ntpd - Ver. 4.2.6p5

G_W_Albrecht — Tue, 22 Aug 2023 13:43:06 GMT

Not needed, see https://support.checkpoint.com/results/sk/sk110271

Re: Update ntpd - Ver. 4.2.6p5

Chris_Atkinson — Tue, 22 Aug 2023 13:53:57 GMT

Check Point gateways don't act as an NTP server.

Typically such components aren't updatable independently of our update mechanisms e.g. JHF etc

Recommend contacting TAC regarding your requirement (with specifics) and including your local SE in the discussion as relevant.

Re: Update ntpd - Ver. 4.2.6p5

FabioLima1 — Fri, 25 Aug 2023 19:48:12 GMT

Do you know if it is possible to update the ntpd?
[Expert@003-A:0]# ntpd --version
ntpd 4.2.6p5
ntpd 4.2.6p5@1.2349-? Fri Jun 25 13:31:00 UTC 2021 (1)

Re: Update ntpd - Ver. 4.2.6p5

the_rock — Fri, 25 Aug 2023 19:53:16 GMT

Not certain about that, as option does not seem to be there even from ntpq menu.

Andy

[Expert@quantum-firewall:0]# ntpq
ntpq> ?
ntpq commands:
:config delay mreadvar readlist
addvars exit mrl readvar
associations help mrv rl
authenticate host ntpversion rmvars
cl hostnames opeers rv
clearvars keyid passociations saveconfig
clocklist keytype passwd showvars
clockvar lassociations peers timeout
config-from-file lopeers poll version
cooked lpassociations pstatus writelist
cv lpeers quit writevar
debug mreadlist raw
ntpq>

Re: Update ntpd - Ver. 4.2.6p5

Bob_Zimmerman — Fri, 25 Aug 2023 21:20:33 GMT

Updating it yourself is definitely unsupported. The whole point of an "appliance" OS is that the vendor is responsible for all packages on the system. If you install your own packages, then you are taking that responsibility onto yourself. If you want to keep support, you should talk to your sales team and file a Request For Enhancement (RFE) to get Check Point to evaluate the new package for inclusion in a future release.

If you don't care about support (e.g, this is in a lab and you just want to see if it's possible), it isn't that hard. I'm not going to give detailed instructions because if you want to do this on your own, you need to know enough to be able to fix it if something goes wrong. Check Point's OS is based on Red Hat Enterprise Linux. It has rpm, though doesn't have any of the common helpers like yum or dnf.

Re: Update ntpd - Ver. 4.2.6p5

the_rock — Fri, 25 Aug 2023 21:28:27 GMT

Its all over Google, Im sure @FabioLima1 can find it easily : - )

Andy

Re: Update ntpd - Ver. 4.2.6p5

Chris_Atkinson — Sat, 26 Aug 2023 11:31:50 GMT

Why are you looking to update it?

If there is a problem or security concern please consult TAC accordingly.

Re: Update ntpd - Ver. 4.2.6p5

the_rock — Sat, 26 Aug 2023 11:52:44 GMT

Agree 100%!