Gaia build number list including HFAs - does it exist?

[Petr_Hantak]

I have following problem. Quite a lot of Check Point devices across multiple core networks and remote branches as well. We are reading information from devices via HPNA.

I would like to sum up and compare device software versions in simple output where I could tell if it is already up to date for latest Jumbo HFA or if patching needs to be plan. (You can imagine that it is quite a task negotiate suitable patching window with all customers, so we have always some devices on older version).

I made simple table of few latest HFAs for R77.30 which looks following:

R77.30
HFA take	Build number	SVN build
317	R77.30 - Build 126	990180074
302	R77.30 - Build 115	990180073
292	R77.30 - Build 104	990180058
225	R77.30 - Build 060	990180695
216	R77.30 - Build 048	990180695
159	R77.30 - Build 137	990180695

I tried to find some versions summary on in SKs, but there are major releases only in List of R77.30 Gaia OS build numbers and kernel versions per released image or List of R80.10 Gaia OS build numbers and kernel versions per released image

Do you know if is it versioning summarized anywhere? HPNA reading Build number like in table by default.

[Kaspars_Zibarts]

You can always try this and avoid build numbers altogether. Just pure take # if that's what you're after

https://community.checkpoint.com/thread/7023-security-gateway-inventory 

[Petr_Hantak]

Thank you for your tip. I tried your script already before. In case I won't find build numbers way, then it could be a solution. I just wanted to use channels which I have already like SNMP because it is always more hard to add command functionality under 3rd party tools. Every customization comes with greater headache.

[Kaspars_Zibarts]

Understand  but that means you have to maintain the "matrix" of build numbers vs takes

But I agree - take number should be included in SNMP by now as it is the main reference these days anyways

[Danny]

HP Network Automation (HPNA) uses SNMP so you can always add additional checks via Advanced SNMP configuration as described here.

[JozkoMrkvicka · Accepted solution]

In HPNA you can create custom diagnostics where you can do whatever you want.

For example, we are checking content of fwkern.conf based on HPNA diagnostic.

In your case, you can simple say that you want to perform following commands on selected gateways (and managements):

cpinfo -y all

installed_jumbo_take (from expert)

In newer Jumbo Takes, you have Take number mentioned in cpinfo -y all output.

HPNA can be used also to send email with output from diagnostic.

[Petr_Hantak]

Thank you Jozko Mrkvicka‌ and Danny Jung‌. Actually this seems to be true way for now. I already contacted our responsible HPNA specialst to help me with suitable setup. 

Also reading content from fwkern.conf isn't a bad idea at all, because that is sad true that HPNA doesn't read this kind of configuration parts at all.

[JozkoMrkvicka]

HPNA is powerful tool despite the fact that it is not user friendly oriented.... You just need to spend days and play with it... or hire HPNA specialist for that

[MikeH]

Bumping.

Does a comprehensive build list exist?

[PhoneBoy]

As far as I know, we have not assembled this for more recent releases.