Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Bulu_N
Explorer
Jump to solution

AV and ABOT showing Different results in CLI and Smart console (Audit Point)

Dear CheckMates Team,

Smartconsole GUI client showing wrong results when CLI shows updated date so which one I can trust?

CLI showing updated one:

cpview.png

Antimalware update status command:

antimalware.png

Now Smartconsole IPS showing correct but AV and ABOT showing incorrect why?????

AV ABOT Protection.png

I create a LAB environment and show the same result 

Now when I checked and found this SK171644 : Protection last update status for Anti-Bot and Anti-Virus shows incorrect date in SmartConsole

Remove or backup the antimalware_protections_query.xml cache file:
[Expert@MGMT-1:0]# mv antimalware_protections_query.xml  /var/tmp 

So is this the solution or what is the solution?

NOTE: Still, I am not following the SK because I can't run in the production so, Please help

3 Solutions

Accepted Solutions
PhoneBoy
Admin
Admin

The two CLI are showing different things (cpview showing when gateway updated, cpstat shows the update package date) but they should be correct.
SmartConsole is getting the data from the XML file, presumably, so removing the file should cause the file to be regenerated (hopefully with correct information).
Seems like a harmless thing to verify in the lab.

View solution in original post

Chris_Atkinson
Employee Employee
Employee

As above these are different criteria that won't necessarily match.

Please also check if the following is helpful for you:

https://community.checkpoint.com/t5/Management/Protections-Last-Update/td-p/169402

CCSM R77/R80/ELITE

View solution in original post

the_rock
Legend
Legend

I see what guys are saying, Im fairly sure its cosmetic, I confirmed in both R81.10 and R81.20 labs.

Andy

View solution in original post

4 Replies
PhoneBoy
Admin
Admin

The two CLI are showing different things (cpview showing when gateway updated, cpstat shows the update package date) but they should be correct.
SmartConsole is getting the data from the XML file, presumably, so removing the file should cause the file to be regenerated (hopefully with correct information).
Seems like a harmless thing to verify in the lab.

Chris_Atkinson
Employee Employee
Employee

As above these are different criteria that won't necessarily match.

Please also check if the following is helpful for you:

https://community.checkpoint.com/t5/Management/Protections-Last-Update/td-p/169402

CCSM R77/R80/ELITE
the_rock
Legend
Legend

I see what guys are saying, Im fairly sure its cosmetic, I confirmed in both R81.10 and R81.20 labs.

Andy

the_rock
Legend
Legend

Btw, you can always do the sk Tim Hall gave in the link @Chris_Atkinson provided to force an update.

Andy

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events