Threat Extraction Engine Release Updates

Solution

Introduction | Availability | Manual Installation | List of Resolved Issues

Introduction

Check Point's Threat Extraction Engine (TEX) supports a self-updatable package mechanism, this ensures your Security Gateways are always protected with the latest security improvements and features, without requiring manual intervention or hotfix installations.

The Threat Extraction Engine package is installed automatically on all relevant Check Point devices when Automatic Update downloads are enabled (see sk175504, section 2-B), and one or more of these Software Blades is enabled:

• Threat Extraction
• Data Loss Prevention
• Content Awareness

For R81.20, Jumbo Hotfix Accumulator R81.20 Take 56 or higher must be installed.

If Automatic Updates are disabled, you must first manually install the latest AutoUpdater Take and then install the Threat Extraction Engine package manually using the steps below, in the Manual Installation section.

Checking Threat Extraction Engine version

The Threat Extraction Engine version changes with every installed update.

To see the installed Threat Extraction Engine version in Gaia Portal:

1. With a web browser, connect to Gaia Portal on the Security Gateway / Cluster Member.
2. Go to the Overview page:
3. In the right pane Blades, click Threat Extraction.
4. Refer to the line Engine version.

Example:

To see the installed Threat Extraction Engine version in Command Line:

1. Connect to the command line on the Security Gateway / each Cluster Member / Scalable Platform Security Group.
2. Log in to the Expert mode:

expert 3. Run:

• On the Security Gateway / each Cluster Member:

autoupdatercli show json | jq '.products[] | select(."product-name" == "tex") | ."product-components"[]."repository-packages"[] | select(."package-installed" == "true")'

• On the Scalable Platform Security Group:

g_all autoupdatercli show json | jq '.products[] | select(."product-name" == "tex") | ."product-components"[]."repository-packages"[] | select(."package-installed" == "true")'

Availability

Security Gateway Version	Engine Update Version	Release Date	Package Download
R82.10	Update 1 - Take 8	19 July 2026	(TAR)
(TAR) For Check Point Firewall 3900 Appliances
R81.20	Update 1 - Take 15	22 September 2024	(TAR)

Manual Installation (Offline)

Show / Hide Instructions

1. Mandatory: Install the latest Take of the AutoUpdater on the Security Gateway / each Cluster Member / Scalable Platform Security Group.

2. Get the Installation Script package:

3. Download the autoupdateIntegralPackageInstall.tgz package to your computer.

   2. Copy the package from your computer to the Security Gateway / each Cluster Member / Scalable Platform Security Group to some directory (for example, /var/log/).

4. Get the Threat Extraction Engine Update package:

5. Download the Threat Extraction Engine Update package (from the " Availability" section above) to your computer.

   2. Copy the Threat Extraction Engine Update package ( Threat_Extraction_Engine_R_T_AutoUpdate.tar) to the Security Gateway / each Cluster Member / Scalable Platform Security Group to some directory (for example, /var/log/).

6. Connect to the command line on the Security Gateway / each Cluster Member / Scalable Platform Security Group.

7. Log in to the Expert mode:

expert 06. On the Scalable Platform Security Group, copy the two packages to all Security Group Members (in our example, the packages are located in /var/log/):

1. Copy the Installation Script package:

asg_cp2blades /var/log/autoupdateIntegralPackageInstall.tgz 2. Copy the Threat Extraction Engine Update package:

asg_cp2blades /var/log/Threat_Extraction_Engine_R<VERSION>_T<TAKE>_AutoUpdate.tar 07. Go to the directory with the required packages (in our example, /var/log/):

• On the Security Gateway / each Cluster Member:

cd /var/log/ ; pwd - On the Scalable Platform Security Group:

g_all cd /var/log/ ; g_all pwd 08. Create a temporary directory:

• On the Security Gateway / each Cluster Member:

mkdir -v TexEngineUpdate - On the Scalable Platform Security Group:

g_all mkdir -v TexEngineUpdate 09. Move the required packages into the temporary directory: 1. Move the Installation Script package:

• On the Security Gateway / each Cluster Member:

mv -v /var/log/autoupdateIntegralPackageInstall.tgz /var/log/TexEngineUpdate - On the Scalable Platform Security Group:

g_all mv -v /var/log/autoupdateIntegralPackageInstall.tgz /var/log/TexEngineUpdate 2. Move the Threat Extraction Engine Update package:

• On the Security Gateway / each Cluster Member:

mv -v /var/log/Threat_Extraction_Engine_R<VERSION>_T<TAKE>_AutoUpdate.tar /var/log/TexEngineUpdate - On the Scalable Platform Security Group:

g_all mv -v /var/log/Threat_Extraction_Engine_R<VERSION>_T<TAKE>_AutoUpdate.tar /var/log/TexEngineUpdate 10. Go into the temporary directory:

• On the Security Gateway / each Cluster Member:

cd /var/log/TexEngineUpdate ; pwd - On the Scalable Platform Security Group:

g_all cd /var/log/TexEngineUpdate ; g_all pwd 11. Extract the installation script:

• On the Security Gateway / each Cluster Member:

tar xzf autoupdateIntegralPackageInstall.tgz - On the Scalable Platform Security Group:

g_all tar xzf autoupdateIntegralPackageInstall.tgz 12. Run the installation script:

• On the Security Gateway / each Cluster Member:

autoupdateIntegralPackageInstall.sh Threat_Extraction_Engine_R<VERSION>_T<TAKE>_AutoUpdate.tar - On the Scalable Platform Security Group:

g_all autoupdateIntegralPackageInstall.sh Threat_Extraction_Engine_R<VERSION>_T<TAKE>_AutoUpdate.tar 13. Follow the instructions on the screen. 14. Wait for 5 minutes. 15. Get the installed Threat Extraction Engine Update version:

• On the Security Gateway / each Cluster Member:

Note - In the output, refer to " package-version" - it must match the Take of the package you installed.

Important - The installation does not require a restart of Check Point services ( cpstop;cpstart) or a reboot. After the installation, no further action is required, the update is applied immediately.

List of Resolved Issues and New Features per Threat Extraction Engine Update

R82.10 Release

R81.20 Release