topic Re: Upgrade Checkpoint Identity Agent from console in General Topics

Upgrade Checkpoint Identity Agent from console

Konstantin_Kosa — Mon, 04 Feb 2019 16:10:28 GMT

Hello everybody!

Please help inexperienced user.

Does checkpoint have the ability to install and update the version of Checkpoint Identity Agent from its own console?

Our administrator assures that there are no such mechanisms and these actions can be performed only through AD.

If possible, please send me a link. Thanks.

WBR

Konstantin

kokv@reso.ru

Re: Upgrade Checkpoint Identity Agent from console

Mark_Mitchell — Mon, 04 Feb 2019 20:28:42 GMT

Hi Konstantin,

The identity agent can be distributed/updated by the following means:

1) Distribution of the msi via group policy or another software distribution system (sccm etc)

2) Captive Portal - you have the option of directing users to a captive portal to obtain the latest version of the agent and they install manually.

3) Configure the Identity Awareness blade to check for agent upgrades. This is dependant on the hardware and OS platform used as the SMB appliances do have some limitations.

If you can advise on the setup (hardware/software) we can advise accordingly.

Identity Awareness R80.10 Administration Guide

Regards

Mark

Re: Upgrade Checkpoint Identity Agent from console

Konstantin_Kosa — Tue, 05 Feb 2019 07:00:01 GMT

Hi, Mark!

Thank you very much for your reply!

That is, there is no mechanism for updating versions from the console? Is there a script to check the installed version and if it is old automatically update without user intervention?

Re: Upgrade Checkpoint Identity Agent from console

Konstantin_Kosa — Tue, 05 Feb 2019 07:02:02 GMT

! We use Windows 7 and Windows 10 on clients.

Re: Upgrade Checkpoint Identity Agent from console

Konstantin_Kosa — Tue, 05 Feb 2019 07:25:13 GMT

And another task: if the client PC version of Check Point Endpoint Security (SandBlast) 80.89 is installed - it must be removed and version 80.90 installed. If version 80.90 is already installed - do nothing.

Re: Upgrade Checkpoint Identity Agent from console

Mark_Mitchell — Tue, 05 Feb 2019 19:55:59 GMT

Hi Konstantin,

There is no way in which to update the client from SmartConsole. It has to be client initiated. I.e browse to captive portal, identity agent checks in etc.

You could write a script to check for an installed version, but that is more of a Software Distribution on Windows thing than Check Point. I know that with SCCM a deployment can have a script attached that will check for pre-reqs or certain versions for update. If you are using group policy I assume you could do something similar. That would require either writing a Powershell or vbscript that would run on the client that would check locally installed versions and then if it was deemed to be upgrade-able by the script it could run the msi file associated with your Identity Agent.

Regards

Mark

Re: Upgrade Checkpoint Identity Agent from console

Konstantin_Kosa — Wed, 06 Feb 2019 12:24:03 GMT

Thanks. I've already come to the same conclusion

Re: Upgrade Checkpoint Identity Agent from console

Konstantin_Kosa — Wed, 06 Feb 2019 12:26:01 GMT

The question is closed.