Upgrade Checkpoint Identity Agent from console

[Konstantin_Kosa]

Hello everybody!

Please help inexperienced user.

Does checkpoint have the ability to install and update the version of Checkpoint Identity Agent from its own console?

Our administrator assures that there are no such mechanisms and these actions can be performed only through AD.

If possible, please send me a link. Thanks.

WBR

Konstantin

kokv@reso.ru

[Mark_Mitchell]

Hi Konstantin,

The identity agent can be distributed/updated by the following means:

1) Distribution of the msi via group policy or another software distribution system (sccm etc)

2) Captive Portal - you have the option of directing users to a captive portal to obtain the latest version of the agent and they install manually. 

3) Configure the Identity Awareness blade to check for agent upgrades. This is dependant on the hardware and OS platform used as the SMB appliances do have some limitations. 

If you can advise on the setup (hardware/software) we can advise accordingly. 

Identity Awareness R80.10 Administration Guide 

Regards

Mark

[Konstantin_Kosa]

Hi, Mark!

Thank you very much for your reply!

That is, there is no mechanism for updating versions from the console? Is there a script to check the installed version and if it is old automatically update without user intervention?

[Konstantin_Kosa]

 ! We use Windows 7 and Windows 10 on clients.

[Konstantin_Kosa]

And another task: if the client PC version of Check Point Endpoint Security (SandBlast) 80.89 is installed - it must be removed and version 80.90 installed. If version 80.90 is already installed  - do nothing.

[Mark_Mitchell]

Hi Konstantin, 

There is no way in which to update the client from SmartConsole. It has to be client initiated. I.e browse to captive portal, identity agent checks in etc. 

You could write a script to check for an installed version, but that is more of a Software Distribution on Windows thing than Check Point. I know that with SCCM a deployment can have a script attached that will check for pre-reqs or certain versions for update. If you are using group policy I assume you could do something similar. That would require either writing a Powershell or vbscript that would run on the client that would check locally installed versions and then if it was deemed to be upgrade-able by the script it could run the msi file associated with your Identity Agent. 

Regards

Mark

[Konstantin_Kosa]

Thanks. I've already come to the same conclusion

[Konstantin_Kosa]

The question is closed.