- Products
- Learn
- Local User Groups
- Partners
- More
The Great Exposure Reset
24 February 2026 @ 5pm CET / 11am EST
CheckMates Fest 2026
Watch Now!AI Security Masters
Hacking with AI: The Dark Side of Innovation
CheckMates Go:
CheckMates Fest
Hey guys,
Below is super basic script to verify connection to below servers:
Lab:
[Expert@CP-GW:0]# ./check_cp_updates.sh
ERROR: Provide a valid server file via -f servers.txt
Usage:
./check_cp_updates.sh -f servers.txt [--path /some/path] [--connect-timeout 5] [--max-time 20] [--retries 1] [--parallel 1] [--out results.csv]
Examples:
./check_cp_updates.sh -f cp_update_servers.txt
./check_cp_updates.sh -f cp_update_servers.txt --path / --parallel 5
[Expert@CP-GW:0]# touch cp_update_servers.txt
[Expert@CP-GW:0]# vi cp_update_servers.txt
[Expert@CP-GW:0]# ./check_cp_updates.sh -f cp_update_servers.txt
Done. Results written to: results_cp_update_servers.csv
[Expert@CP-GW:0]# more results_cp_update_servers.csv
timestamp,server,url,http_code,time_total,remote_ip,error
2026-02-09T09:26:59-0500,updates.checkpoint.com,https://updates.checkpoint.com/,404,0.126571,18.245.104.81,""
2026-02-09T09:26:59-0500,dl3.checkpoint.com,https://dl3.checkpoint.com/,302,0.081083,23.221.242.130,""
2026-02-09T09:26:59-0500,downloads.checkpoint.com,https://downloads.checkpoint.com/,301,0.389605,18.67.17.36,""
[Expert@CP-GW:0]#
Hey guys,
Below is super basic script to verify connection to below servers:
Lab:
[Expert@CP-GW:0]# ./check_cp_updates.sh
ERROR: Provide a valid server file via -f servers.txt
Usage:
./check_cp_updates.sh -f servers.txt [--path /some/path] [--connect-timeout 5] [--max-time 20] [--retries 1] [--parallel 1] [--out results.csv]
Examples:
./check_cp_updates.sh -f cp_update_servers.txt
./check_cp_updates.sh -f cp_update_servers.txt --path / --parallel 5
[Expert@CP-GW:0]# touch cp_update_
Thank you for sharing this useful script! I'd like to propose an enhancement to support gateways that don't have direct internet connectivity but are configured with a proxy using something like this:
get_proxy_config() {
local proxy_line
proxy_line="$(clish -c "show configuration proxy" 2>/dev/null | grep "^set proxy address" || true)"
if [[ -n "$proxy_line" ]]; then
local proxy_ip proxy_port
proxy_ip="$(echo "$proxy_line" | awk '{print $4}')"
proxy_port="$(echo "$proxy_line" | awk '{print $6}')"
if [[ -n "$proxy_ip" && -n "$proxy_port" ]]; then
echo "${proxy_ip}:${proxy_port}"
return 0
fi
fi
return 1
}
PROXY_CONFIG="$(get_proxy_config || true)"
export PROXY_CONFIG
And then something like this
if [[ -n "${PROXY_CONFIG}" ]]; then
curl_opts+=(--proxy "${PROXY_CONFIG}")
fi
Thank you for sharing this useful script! I'd like to propose an enhancement to support gateways that don't have direct internet connectivity but are configured with a proxy using something like this:
get_proxy_config() { local proxy_line proxy_line="$(clish -c "show configuration proxy" 2>/dev/null | grep "^set proxy address" || true)" if [[ -n "$proxy_line" ]]; then local proxy_ip proxy_port proxy_ip="$(echo "$proxy_line" | awk '{print $4}')" proxy_port="$(echo "$proxy_line" | aw...;
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY