Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Petr_Hantak
Advisor
Advisor
Jump to solution

Gaia build number list including HFAs - does it exist?

I have following problem. Quite a lot of Check Point devices across multiple core networks and remote branches as well. We are reading information from devices via HPNA.

I would like to sum up and compare device software versions in simple output where I could tell if it is already up to date for latest Jumbo HFA or if patching needs to be plan. (You can imagine that it is quite a task negotiate suitable patching window with all customers, so we have always some devices on older version).

I made simple table of few latest HFAs for R77.30 which looks following:

R77.30
HFA takeBuild numberSVN build
317R77.30 - Build 126990180074
302R77.30 - Build 115990180073
292R77.30 - Build 104990180058
225R77.30 - Build 060990180695
216R77.30 - Build 048990180695
159R77.30 - Build 137990180695

 

I tried to find some versions summary on in SKs, but there are major releases only in List of R77.30 Gaia OS build numbers and kernel versions per released image or List of R80.10 Gaia OS build numbers and kernel versions per released image

Do you know if is it versioning summarized anywhere? HPNA reading Build number like in table by default.

1 Solution

Accepted Solutions
JozkoMrkvicka
Mentor
Mentor

In HPNA you can create custom diagnostics where you can do whatever you want.

For example, we are checking content of fwkern.conf based on HPNA diagnostic.

In your case, you can simple say that you want to perform following commands on selected gateways (and managements):

cpinfo -y all

installed_jumbo_take (from expert)

In newer Jumbo Takes, you have Take number mentioned in cpinfo -y all output.

HPNA can be used also to send email with output from diagnostic.

Kind regards,
Jozko Mrkvicka

View solution in original post

9 Replies
Kaspars_Zibarts
Employee Employee
Employee

You can always try this and avoid build numbers altogether. Just pure take # if that's what you're after

https://community.checkpoint.com/thread/7023-security-gateway-inventory 

Petr_Hantak
Advisor
Advisor

Thank you for your tip. I tried your script already before. In case I won't find build numbers way, then it could be a solution. I just wanted to use channels which I have already like SNMP because it is always more hard to add command functionality under 3rd party tools. Every customization comes with greater headache.

0 Kudos
Kaspars_Zibarts
Employee Employee
Employee

Understand Smiley Happy but that means you have to maintain the "matrix" of build numbers vs takes Smiley Happy

But I agree - take number should be included in SNMP by now as it is the main reference these days anyways

0 Kudos
Danny
Champion Champion
Champion

HP Network Automation (HPNA) uses SNMP so you can always add additional checks via Advanced SNMP configuration as described here.

JozkoMrkvicka
Mentor
Mentor

In HPNA you can create custom diagnostics where you can do whatever you want.

For example, we are checking content of fwkern.conf based on HPNA diagnostic.

In your case, you can simple say that you want to perform following commands on selected gateways (and managements):

cpinfo -y all

installed_jumbo_take (from expert)

In newer Jumbo Takes, you have Take number mentioned in cpinfo -y all output.

HPNA can be used also to send email with output from diagnostic.

Kind regards,
Jozko Mrkvicka
Petr_Hantak
Advisor
Advisor

Thank you Jozko Mrkvicka‌ and Danny Jung‌. Actually this seems to be true way for now. I already contacted our responsible HPNA specialst to help me with suitable setup. 

Also reading content from fwkern.conf isn't a bad idea at all, because that is sad true that HPNA doesn't read this kind of configuration parts at all.

JozkoMrkvicka
Mentor
Mentor

HPNA is powerful tool despite the fact that it is not user friendly oriented.... You just need to spend days and play with it... or hire HPNA specialist for that

Kind regards,
Jozko Mrkvicka
MikeH
Participant

Bumping.

 

Does a comprehensive build list exist?

0 Kudos
PhoneBoy
Admin
Admin

As far as I know, we have not assembled this for more recent releases.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events