Install Threat Prevention Policy with Cron Job

[Di_Junior]

Dear Mates

I wish to have a cron job that will be installing the threat prevention policy every 20 minutes. Could you help me how to achieve this.

Thanks in advance

[G_W_Albrecht]

I do not understand the reason for your wish, as a TP policy will not change automatically and surely not every every 20 mins. Issue the following command on the GW to achieve it:

0.  # fw fetch <MGMT IP address>
   

[G_W_Albrecht]

There is a relevant discussion here: Re: Is it possible to install a Policy without sending it to the Gateways???

Summary: No fetch will ever occur, because the policy did not change, and local policy will be installed that does not differ from the currently installed. After a Policy install, the same occurs with the new policy.

[PhoneBoy]

What precisely are you hoping to achieve by doing this?

[_Val_]

the main question is, why?

[Timothy_Hall]

As others have observed not sure exactly why you would want to do this, but to reinstall the Threat Prevention policy only and not the Access Control policy with it, the command would be fw amw fetch <MGMT IP Address>

The gateway dynamically receives pattern/signature updates for the various TP blades automatically, so there is no need to reinstall/fetch the AMW/TP policy to make those updates take effect.