Update ntpd - Ver. 4.2.6p5

[FabioLima1]

Hey guys
I need help.
I need to update the Check Point gateways ntpd server version. Anyone who has done this activity?

Do you know if it is possible to update the ntpd?
[Expert@003-A:0]# ntpd --version
ntpd 4.2.6p5
ntpd 4.2.6p5@1.2349-? Fri Jun 25 13:31:00 UTC 2021 (1)

[the_rock]

https://support.checkpoint.com/results/sk/sk92602

ntpq> version
ntpq 4.2.6p5@1.2349-? Fri Nov 11 13:12:00 UTC 2022 (1)
ntpq>

 

[FabioLima1]

Do you know if it is possible to update the ntpd?
[Expert@003-A:0]# ntpd --version
ntpd 4.2.6p5
ntpd 4.2.6p5@1.2349-? Fri Jun 25 13:31:00 UTC 2021 (1)

[the_rock]

Not certain about that, as option does not seem to be there even from ntpq menu.

Andy

[Expert@quantum-firewall:0]# ntpq
ntpq> ?
ntpq commands:
:config delay mreadvar readlist
addvars exit mrl readvar
associations help mrv rl
authenticate host ntpversion rmvars
cl hostnames opeers rv
clearvars keyid passociations saveconfig
clocklist keytype passwd showvars
clockvar lassociations peers timeout
config-from-file lopeers poll version
cooked lpassociations pstatus writelist
cv lpeers quit writevar
debug mreadlist raw
ntpq>

[Bob_Zimmerman]

Updating it yourself is definitely unsupported. The whole point of an "appliance" OS is that the vendor is responsible for all packages on the system. If you install your own packages, then you are taking that responsibility onto yourself. If you want to keep support, you should talk to your sales team and file a Request For Enhancement (RFE) to get Check Point to evaluate the new package for inclusion in a future release.

If you don't care about support (e.g, this is in a lab and you just want to see if it's possible), it isn't that hard. I'm not going to give detailed instructions because if you want to do this on your own, you need to know enough to be able to fix it if something goes wrong. Check Point's OS is based on Red Hat Enterprise Linux. It has rpm, though doesn't have any of the common helpers like yum or dnf.

[the_rock]

Its all over Google, Im sure @FabioLima1 can find it easily : - )

Andy

[Chris_Atkinson · Accepted solution]

Why are you looking to update it?

If there is a problem or security concern please consult TAC accordingly. 

[the_rock]

Agree 100%!

[G_W_Albrecht]

Not needed, see https://support.checkpoint.com/results/sk/sk110271

[Chris_Atkinson]

Check Point gateways don't act as an NTP server.

Typically such components aren't updatable independently of our update mechanisms e.g. JHF etc

Recommend contacting TAC regarding your requirement (with specifics) and including your local SE in the discussion as relevant.