Website to check latest IPS update version number

[prasanga]

Hi,

Is there a website where I can check the latest IPS definition number ?

So I can cross check with the one actually installed in my firewall.

[Tal_Paz-Fridman]

Hi

You can use this page (used for offline updates)

https://www.checkpoint.com/defense/updates/index.html

For R80.X press on the link for Version Information. When I do this I received 635215795

HTH

Tal

[Timothy_Hall]

That URL does not appear to be accessible to non-Check Point employees, as I'm getting an "Unauthorized" even though I am signed in to the User Center.

[Tal_Paz-Fridman]

Thank you for the update.

Will check for an alternative method.

[G_W_Albrecht]

https://www.checkpoint.com/advisories/

[prasanga]

Hi

I checked the site. But what I exactly want is the latest IPS definition number released.

thanks

[Tal_Paz-Fridman]

Still trying to see if there is a simple way.

BTW, did you manage to login to https://www.checkpoint.com/defense/updates/index.html

Thanks

[prasanga]

I cannot login to that. I am a Checkpoint Customer. Not a partner.

Thanks.

[Tal_Paz-Fridman]

It should be open to customers with valid IPS license / subscription.

[_Val_]

@Tal_Paz-Fridman this is a very old link indeed 🙂 Should be decommissioned long time ago.

[Tomer_Kashayov]

Are you subscribed to ips-news@checkpoint.com? 

you will get an email for each new package including new content details. 

[prasanga]

Thanks a lot.

I am already subscribed to this but I did not notice until now that it contains this information.

Thanks.

[Tomer_Kashayov]

In addition, there are SmartConsole notifications for security updates in Security policies  > Threat Prevention > Updates 

[Avi_Bechor · Accepted solution]

Hi,

As Tomer replied, we recommend our customers to subscribe to security updates using the following link:

https://www.checkpoint.com/security-advisories-subscription/

Additionally, it is possible to use the MGMT CLI command for more IPS update information, as detailed in the documentation below and received the last version.

mgmt_cli show ips-status

https://sc1.checkpoint.com/documents/latest/APIs/#cli/show-ips-status~v1.8%20

Thanks,

Avi

[Sven_Glock]

Hi @prasanga ,

I found something that could be what you looked for: https://www-app.checkpoint.com/defense/updates/SmartDefense/protected/6/r80-offline/ips.version.txt

Regards
Sven

[Sven_Glock]

For some kind of reason my link is no longer showing actul version...

So I had to switch to @Avi_Bechor 's solution using API:

[Expert@cp:0]# mgmt_cli show ips-status --session-id "<id>"
last-updated:
  posix: 1699830765000
  iso-8601: "2023-11-13T00:12+0100"
installed-version: "635237571"
installed-version-creation-time:
  posix: 1699783200000
  iso-8601: "2023-11-12T11:00+0100"
update-available: false
latest-version: "635237571"
latest-version-creation-time:
  posix: 1699783200000
  iso-8601: "2023-11-12T11:00+0100"

[Douglas_Rich]

that link stopped updating 2023-11-08

I've reached out to CP TAC and our SE to see if we can get it fixed. 

[Sven_Glock]

In the meanwhile I am using skyline. There you will find a metric that is providing latest ips version.
Using this you can additionally build nice graphs showing release time of every single IPS version.

...very helpful in case of probems with fresh released IPS signatures!

[jccc]

Hi Sven - would you mind sharing the metric you're using and perhaps even the visualisation?

Thanks

[Sven_Glock]

The code I am using including the metric is: max(latest_ips_version)

The visualisation is a simple time series:

(please ignore the gaps in the graph 🙂)