- CheckMates
- :
- Products
- :
- Developers
- :
- Ansible
- :
- Getting the basics
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Getting the basics
My immediate goal is use Ansible to get some basic facts from a large number of Check Point hosts. These hosts can be a Smart Center or a gateway or ....
From each host I woul like to known the most basic information:
- Check Point version (ex: R80.40 or R81.10)
- Check Point hotfix (ex: JHF Take 120 or JHF Take 11)
- hostname
The hostname is something we get easily.
The version is more work but I think we can figure that one out to get a reliable response.
Getting the Jumbo Hotfix details is even more work and so far the results are not very reliable. And I have not found a good way to tell if a custom hotfix is installed either.
Did anyone master this subject?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You could use the run-script API or check_point.mgmt.cp_mgmt_run_script Ansible collection module to run cpinfo -yFW1 to get that information from a GW or cpinfo -yMGMT to get the information from the management server.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I need to test this in our mixed customer environment to see how usefull the information is that way. Wil see if I can do so this afternoon.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Actually `cpinfo -yMGMT` is not valid.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
"cpinfo -y all" is probably simpler?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
That will be valid on the SMS/MDS and Standalone. What version are you running?
Looking at cpinfo -yall, you can see all the subcategories that you can use for the -y parameter.
