Checking client/server synchronisation

To check that a client is correctly synchronized with the Check Point Endpoint Management servers, you need to check that the PAT "Policy Assignment Table" versions are the same on both the client PC and the Management Server.

To check the PAT version on the management server run the following command:

uepm patver get

On the client check the following registery key

32bit OS

HKEY_LOCAL_MACHINE\SOFTWARE\CheckPoint\Endpoint Security\Device Agent\PATVersion

64bit OS

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\CheckPoint\Endpoint Security\Device Agent\PATVersion

Using the command line you can use reg query to show this value:

32bit OS:

reg query "HKEY_LOCAL_MACHINE\SOFTWARE\CheckPoint\Endpoint Security\Device Agent" /v PATVersion

64bit OS

reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\CheckPoint\Endpoint Security\Device Agent" /v PATVersion