Application Control database and signature update list

[David_C1]

Question:

Is there a way to see:

What applications have been updated/added in each Application Control DB release?

When a particular application signature was added and updated?

I do receive the email notifications when new DBs come out (and they contain a list of apps that have been updated or added) and I am aware of the appwiki, but is there somewhere online (or on the SMS server) where I can see the history of the app control DB and signatures? For example, I want to see when the application signature "1 Password" was added to the database and the last time it was updated.

Thanks

Dave

[PhoneBoy · Accepted solution]

I have never seen such information for App Control anywhere (internally even).
This is most definitely an RFE.

[Lesley]

I agree with Phoneboy. Both mgmt and gw perform updates. GW for the application signatures. Located here:

Application Control and URL Filtering update files are located in $FWDIR/appi/update/:

1. The main database files are appi_db.C and urlf_db.bin. The files are zipped and encrypted.

And fwmgmt updates for the package: includes all the application information, such as application name, category, description, tags, risk etc. It is used for policy definition in the rule base.

If you want a look into what is inside follow this SK
https://support.checkpoint.com/results/sk/sk103882

Show / Hide the instructions for the Application Control offline update on Security Gateways R81 and...

1. On your computer, download this Application Control offline update package.

[the_rock]

Hey Dave,

Best reference I can think of is below, though I know it does not answer your question.

Andy

https://appwiki.checkpoint.com/appwikisdb/public.htm