api call to verify update of signatures

[JesperBay]

Hi there,

anyone who has created a api call/script for checking if the latest signatures for IPS and antivirus are installed on a certain gateway?

It is ofcourse a matter of being able monitor that updates ARE actually downloaded and installed.

any feedback will be appriciated.

thank you in advance.

best regards

Jesper

[Maik]

Hello there,

Not sure if there is a pre-built mechanism to achieve this, but you can use the following method.

Check whats the latest available IPS database version by executing the following api command (remotely or directly on your management environment):

https://sc1.checkpoint.com/documents/latest/APIs/#cli/show-ips-status~v1%20

Compare the version with the installed one on each gateway, which can be obtained via "ips stat" (or clish -c "ips stat" when working within bash).

Regards,

Maik