policy installation status via CLI
From cpwiki.net
These commands can be used to query policy info for firewalls. The cpmistat command is executed on Security Management Server / Domain Security Management Server. The firewall name should be a standalone firewall or a cluster member. It won't work for cluster objects. Many other parameters are available via cpmistat.
get name of policy installed on a firewalls
# cpmistat -r fw firewall_name | grep fwStatus.fwPolicyStat.fwPolicyName
get install time
# cpmistat -r fw firewall_name | grep fwStatus.fwPolicyStat.fwInstallTime